Description
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P device vif is always available. That is not true when userspace sends non-P2P public action frames through the primary interface, or when action-frame abort runs after the P2P device vif has not been created. Fall back to the primary vif when aborting an action frame without a P2P device vif, and guard P2P device saved IE access before using it for peer channel search.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < fb01b8c85682e531516adf6fb632bf2ccb67ec1daffected6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < 66b89c6a7da47efb38a9b839c2ae221b23a1c88baffected6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < 6641ba636bf675b2634c49fe818931cf6ca8f547affected6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < f334b26b884dff5d0a558dc464fa55f300868a68affected6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < f26e1b16904555e171292e183c3cfc1c38159fc5affected6eda4e2c54255cd26a58d2fcec73ec3bff7a515b to < 1b1edb9ebed49099bdc924cef49a9aea8b552199affected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.114 to ≤ 6.12.*unaffected6.18.57 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/fb01b8c85682e531516adf6fb632bf2ccb67ec1d ↗
- https://git.kernel.org/stable/c/66b89c6a7da47efb38a9b839c2ae221b23a1c88b ↗
- https://git.kernel.org/stable/c/6641ba636bf675b2634c49fe818931cf6ca8f547 ↗
- https://git.kernel.org/stable/c/f334b26b884dff5d0a558dc464fa55f300868a68 ↗
- https://git.kernel.org/stable/c/f26e1b16904555e171292e183c3cfc1c38159fc5 ↗
- https://git.kernel.org/stable/c/1b1edb9ebed49099bdc924cef49a9aea8b552199 ↗