Vulnerability in mt76: mt7915 package - Fix for Injected MPDU Transmission
Summary
GSD-2022-1001721: mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU. Affects Kernel versions < df467929a0408efccd9495ccc5b650d9a3782313. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76: mt7915 package is a component of the Linux Kernel, which is responsible for managing wireless network interfaces. It provides support for MediaTek MT7915 Wi-Fi chips. These chips are commonly used in various devices to enable wireless connectivity. The package includes drivers and firmware necessary for the proper functioning of the MT7915 Wi-Fi chips.
Vulnerability Detail
The vulnerability in the mt76: mt7915 package involves the injection of MPDU (MAC Protocol Data Unit) transmissions that utilize Hardware A-MSDU (Aggregated MAC Service Data Unit). This vulnerability allows an attacker to manipulate the MPDU transmission process, potentially leading to unauthorized access, data leakage, or denial of service. The issue arises from a flaw in the implementation of HW A-MSDU usage. It is important to note that the impact and feasibility of an attack exploiting this vulnerability have not been confirmed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the mt76: mt7915 package has been addressed in the Linux Kernel version v5.15.34. It is crucial to keep the Linux Kernel up to date to ensure the latest security patches are applied. For further support or assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mt76: mt7915 package is a component of the Linux Kernel that provides support for MediaTek MT7915 Wi-Fi chips, enabling wireless connectivity in various devices.
MPDU stands for MAC Protocol Data Unit. It is a data unit used in wireless communication to carry MAC layer information.
HW A-MSDU refers to Hardware Aggregated MAC Service Data Unit. It is a mechanism that combines multiple MAC Service Data Units into a single transmission, improving efficiency.
Exploiting this vulnerability could result in unauthorized access to the wireless network, leakage of sensitive data transmitted over the network, or denial of service by disrupting the MPDU transmission process.
To fix this vulnerability, update the Linux Kernel to version v5.15.34 or a later version that includes the commit df467929a0408efccd9495ccc5b650d9a3782313.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
