Vulnerability in ath11k for QCA6390/WCN6855 in Linux Kernel
Summary
GSD-2022-1001249: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855. Affects Kernel versions >= b4a0f54156ac7720de1750b6ea06657c91c52163, < 400705c50bbf184794c885d1efad7fe9ccf1471a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath11k is a wireless driver for Qualcomm Atheros 802.11ax devices, including the QCA6390 and WCN6855 chipsets. It is a part of the Linux Kernel, which is the core component of the Linux operating system. The ath11k driver enables communication between the operating system and the wireless hardware, allowing devices to connect to Wi-Fi networks. However, a vulnerability has been discovered in the ath11k driver that affects the QCA6390 and WCN6855 chipsets.
Vulnerability Detail
The vulnerability in the ath11k driver occurs when a station disconnects from an access point (AP). In this scenario, the driver fails to properly free the peer for the disconnected station. This can lead to memory leaks and potential security issues. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v5.17.2.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
If updating the Linux Kernel is not immediately feasible, a possible workaround is to disable the affected wireless hardware or use an alternative wireless driver that does not exhibit this vulnerability. However, these workarounds may impact the functionality and performance of the wireless capabilities on the affected devices.
Conclusion
In conclusion, a vulnerability has been discovered in the ath11k driver for QCA6390/WCN6855 in the Linux Kernel. This vulnerability can lead to memory leaks and potential security issues. It is recommended to update the Linux Kernel to version v5.17.2 or later to fix this vulnerability. If immediate update is not possible, alternative workarounds such as disabling the affected hardware or using a different driver can be considered. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, if exploited, it could potentially lead to memory leaks and security issues.
This vulnerability affects the QCA6390 and WCN6855 chipsets.
Yes, this vulnerability has been fixed in the Linux Kernel version v5.17.2.
To update the Linux Kernel, you can follow the official documentation and guidelines provided by the Linux Kernel development team.
If updating the Linux Kernel is not immediately feasible, you can consider disabling the affected wireless hardware or using an alternative wireless driver.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
