mac80211: Potential Double Free on Mesh Join
Summary
GSD-2022-1002455: mac80211: fix potential double free on mesh join. Affects Kernel versions >= 86e7d4cd2ed5f4b0188afce8199faffcf1ae7c7e, < c1d9c3628ef0a0ca197595d0f9e01cd3b5dda186. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The mac80211 package is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack. It is responsible for managing wireless network interfaces and handling various operations related to wireless communication. The package is an integral part of the Linux Kernel and is widely used in devices that support Wi-Fi functionality. However, a vulnerability has been discovered in mac80211 that could potentially lead to a double free issue when joining a mesh network.
Vulnerability Detail
The vulnerability in mac80211 arises from a potential double free issue that can occur during the process of joining a mesh network. A double free vulnerability refers to a situation where a program attempts to free a memory block that has already been freed, which can lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition. In this case, the vulnerability can be triggered when a device attempts to join a mesh network, potentially leading to a crash or other unexpected behavior. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The mac80211 package in the Linux Kernel is vulnerable to a potential double free issue when joining a mesh network. This vulnerability has been fixed in the Linux Kernel version v4.14.274. Users are advised to update their Linux Kernel to the latest version to ensure the vulnerability is addressed. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mac80211 is a subsystem in the Linux Kernel that provides the implementation of the IEEE 802.11 wireless networking stack.
A double free vulnerability occurs when a program attempts to free a memory block that has already been freed, potentially leading to memory corruption and other security issues.
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to execute arbitrary code or cause a denial-of-service condition.
To fix this vulnerability, users should update their Linux Kernel to version v4.14.274 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
