Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex Apparently the hex passphrase mechanism does not work on newer chips/firmware (e.g. BCM4387). It seems there was a simple way of passing it in binary all along, so use that and avoid the hexification. OpenBSD has been doing it like this from the beginning, so this should work on all chips. Also clear the structure before setting the PMK. This was leaking uninitialized stack contents to the device.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
b8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 1687845eb8f37360a9ee849a3587ab659b090773affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 2bc34facb90ceeff6f8c17d2006575a6d07c3825affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 4e8dc0e5c7636efaadbd7e488acd34b4291c0431affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < e242c66f7ecfe8f5b6eb308f4ea464fd8589c866affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < f8a6c53ff1d91acd5a20eb627edbffd816eb9a4eaffectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 2fa3a5226b05e0a797c68b9609dcebe0cd236b27affectedb8a64f0e96c2b258321ee03975aeb0f5e88a055b to < 89b89e52153fda2733562776c7c9d9d3ebf8dd6daffected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected4.14.316 to ≤ 4.14.*unaffected4.19.284 to ≤ 4.19.*unaffected5.4.244 to ≤ 5.4.*unaffected5.10.181 to ≤ 5.10.*unaffected5.15.113 to ≤ 5.15.*unaffected6.1.30 to ≤ 6.1.*unaffected6.3.4 to ≤ 6.3.*unaffected6.4 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1687845eb8f37360a9ee849a3587ab659b090773 ↗
- https://git.kernel.org/stable/c/2bc34facb90ceeff6f8c17d2006575a6d07c3825 ↗
- https://git.kernel.org/stable/c/56c7e9c39bd54fd753c0c4b1ed10278cbd3a5f02 ↗
- https://git.kernel.org/stable/c/4e8dc0e5c7636efaadbd7e488acd34b4291c0431 ↗
- https://git.kernel.org/stable/c/e242c66f7ecfe8f5b6eb308f4ea464fd8589c866 ↗
- https://git.kernel.org/stable/c/f8a6c53ff1d91acd5a20eb627edbffd816eb9a4e ↗
- https://git.kernel.org/stable/c/2fa3a5226b05e0a797c68b9609dcebe0cd236b27 ↗
- https://git.kernel.org/stable/c/89b89e52153fda2733562776c7c9d9d3ebf8dd6d ↗