Description
In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virt_wifi has advertised, the __cfg80211_connect_result() will trigger the warning: WARN_ON(bss_not_found). The issue is because the connection code in virt_wifi does not check the SSID from user space (it only checks the BSSID), and virt_wifi will call cfg80211_connect_result() with WLAN_STATUS_SUCCESS even if the SSID is different from the one virt_wifi has advertised. Eventually cfg80211 won't be able to find the cfg80211_bss and generate the warning. Fixed it by checking the SSID (from user space) in the connection code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c7cdba31ed8b87526db978976392802d3f93110c to < 994fc2164a03200c3bf42fb45b3d49d9d6d33a4daffectedc7cdba31ed8b87526db978976392802d3f93110c to < 05c4488a0e446c6ccde9f22b573950665e1cd414affectedc7cdba31ed8b87526db978976392802d3f93110c to < 93e898a264b4e0a475552ba9f99a016eb43ef942affectedc7cdba31ed8b87526db978976392802d3f93110c to < d3cc85a10abc8eae48988336cdd3689ab92581b3affectedc7cdba31ed8b87526db978976392802d3f93110c to < 36e92b5edc8e0daa18e9325674313802ce3fbc29affectedc7cdba31ed8b87526db978976392802d3f93110c to < 416d3c1538df005195721a200b0371d39636e05daffectedc7cdba31ed8b87526db978976392802d3f93110c to < b5d14b0c6716fad7f0c94ac6e1d6f60a49f985c7affected
Linux Linux
Default version status: affected
5.0affected0 to < 5.0unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/994fc2164a03200c3bf42fb45b3d49d9d6d33a4d ↗
- https://git.kernel.org/stable/c/05c4488a0e446c6ccde9f22b573950665e1cd414 ↗
- https://git.kernel.org/stable/c/93e898a264b4e0a475552ba9f99a016eb43ef942 ↗
- https://git.kernel.org/stable/c/d3cc85a10abc8eae48988336cdd3689ab92581b3 ↗
- https://git.kernel.org/stable/c/36e92b5edc8e0daa18e9325674313802ce3fbc29 ↗
- https://git.kernel.org/stable/c/416d3c1538df005195721a200b0371d39636e05d ↗
- https://git.kernel.org/stable/c/b5d14b0c6716fad7f0c94ac6e1d6f60a49f985c7 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗