Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check tdls flag in ieee80211_tdls_oper When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the station exists but not whether it is actually a TDLS station. This allows the operation to proceed for non-TDLS stations, causing unintended side effects like modifying channel context and HT protection before failing. Add a check for sta->sta.tdls early in the ENABLE_LINK case, before any side effects occur, to ensure the operation is only allowed for actual TDLS peers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
941c93cd039852b7ab02c74f4698c99d82bd6cfe to < e602246235fc2ef06c39b2e9cf147d84d0896b73affected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < 6813a8b1b240756dad4375f3e020ce10e4e3871baffected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < 44839ea7e96b3659a1606f3d5267063135479b7caffected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < ba5b43db126a5e7378553869e3f7954d9187349faffected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < 8148c2fda4ebb17104a573649c9b699208ad10eeaffected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < be81f17151fcb8546a95f35ca8f4231b065985deaffected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < e77b2937aaa20264e4bd699d3244bdb50e7e3343affected941c93cd039852b7ab02c74f4698c99d82bd6cfe to < 7d73872d949c488a1d7c308031d6a9d89b5e0a8baffected
Linux Linux
Default version status: affected
3.2affected0 to < 3.2unaffected5.10.259 to ≤ 5.10.*unaffected5.15.209 to ≤ 5.15.*unaffected6.1.175 to ≤ 6.1.*unaffected6.6.142 to ≤ 6.6.*unaffected6.12.81 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/e602246235fc2ef06c39b2e9cf147d84d0896b73 ↗
- https://git.kernel.org/stable/c/6813a8b1b240756dad4375f3e020ce10e4e3871b ↗
- https://git.kernel.org/stable/c/44839ea7e96b3659a1606f3d5267063135479b7c ↗
- https://git.kernel.org/stable/c/ba5b43db126a5e7378553869e3f7954d9187349f ↗
- https://git.kernel.org/stable/c/8148c2fda4ebb17104a573649c9b699208ad10ee ↗
- https://git.kernel.org/stable/c/be81f17151fcb8546a95f35ca8f4231b065985de ↗
- https://git.kernel.org/stable/c/e77b2937aaa20264e4bd699d3244bdb50e7e3343 ↗
- https://git.kernel.org/stable/c/7d73872d949c488a1d7c308031d6a9d89b5e0a8b ↗
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html ↗