Double Free Vulnerability in mac80211
Summary
GSD-2022-1002286: mac80211: fix potential double free on mesh join. Affects Kernel versions >= 3f15e3e62c80e180282f0cbc5559264e11c328b7, < 3bbd0000d012f92aec423b224784fbf0f7bf40f8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mac80211 package is a subsystem in the Linux Kernel that provides support for wireless LAN devices. It is responsible for managing wireless network interfaces, including mesh networks. Mesh networks allow devices to communicate with each other directly, forming a self-configuring network. However, a vulnerability has been discovered in mac80211 that could lead to a potential double free on mesh join.
Vulnerability Detail
The vulnerability in mac80211 occurs when joining a mesh network. A double free vulnerability refers to a situation where memory is freed twice, which can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. In this case, the vulnerability could be triggered during the process of joining a mesh network, potentially allowing an attacker within range to exploit the vulnerability and compromise the system. The vulnerability was introduced in version v5.4.56 of the Linux Kernel and has been fixed in version v5.4.188.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
In conclusion, a double free vulnerability has been discovered in the mac80211 package of the Linux Kernel. This vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition. It is crucial to update the Linux Kernel to version v5.4.188 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides support for wireless LAN devices and manages wireless network interfaces, including mesh networks.
A double free vulnerability occurs when memory is freed twice, leading to memory corruption and potential security issues.
The vulnerability can be exploited by an attacker within range who triggers the double free vulnerability during the process of joining a mesh network.
The vulnerability could potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition.
To fix the vulnerability, it is recommended to update the Linux Kernel to version v5.4.188 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
