Double Free Vulnerability in mac80211
Summary
GSD-2022-1002149: mac80211: fix potential double free on mesh join. Affects Kernel versions >= 6a01afcf8468d3ca2bd8bbb27503f60dcf643b20, < 5d3ff9542a40ce034416bca03864709540a36016. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various operations related to wireless communication. The mac80211 package is widely used in Linux-based systems to enable Wi-Fi functionality.
However, a vulnerability has been discovered in mac80211 that could potentially lead to a double free condition when joining a mesh network. This vulnerability may allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition on the affected system.
Vulnerability Detail
The vulnerability in mac80211 arises from a potential double free issue during the process of joining a mesh network. A double free occurs when a program attempts to free a memory block that has already been freed. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the system.
The vulnerability was introduced in version v5.8 of the Linux Kernel by commit 6a01afcf8468d3ca2bd8bbb27503f60dcf643b20. It was fixed in version v5.10.109 by commit 5d3ff9542a40ce034416bca03864709540a36016.
To exploit this vulnerability, an attacker would need to be within range of the affected Wi-Fi network and send specially crafted packets to trigger the double free condition. The impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The double free vulnerability in mac80211 can potentially lead to severe security issues, including arbitrary code execution and system crashes. It is crucial to update the Linux Kernel to version v5.10.109 or later to mitigate this vulnerability. Users can also utilize the Vulert Playground to check if their system is affected by this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various operations related to wireless communication.
A double free vulnerability occurs when a program attempts to free a memory block that has already been freed. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the system.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.109 or later. This update includes the necessary patch to address the double free issue in mac80211.
Yes, you can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software using just a manifest file like package-lock.json.
The potential consequences of this vulnerability include the execution of arbitrary code by an attacker or a denial-of-service (DoS) condition on the affected system.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
