Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and then calls ieee80211_start_mesh(), which can fail. In that case, the chanctx isn't released then interface removal will attempt to unassign it after it's removed from the driver, hitting: wlan0: Failed check-sdata-in-driver check, flags: 0x0 WARNING: net/mac80211/driver-ops.c:366 at drv_unassign_vif_chanctx ieee80211_assign_link_chanctx __ieee80211_link_release_channel ieee80211_link_release_channel ieee80211_teardown_sdata unregister_netdevice_many_notify _cfg80211_unregister_wdev ieee80211_remove_interfaces ieee80211_unregister_hw mac80211_hwsim_del_radio hwsim_exit_net Correctly release the channel on start failures.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2b5e19677592c167d012c2d129407f39d2bdeb8d to < f0afcec2129c166e61821d6ae097061155f01b12affected2b5e19677592c167d012c2d129407f39d2bdeb8d to < b51f5a310bd6888b90bb9546a8081215dcfe6fbeaffected2b5e19677592c167d012c2d129407f39d2bdeb8d to < 632f7acfe6dac1278a9314eaaab14fada400ddafaffected2b5e19677592c167d012c2d129407f39d2bdeb8d to < 41bee71112db53651ba9a9030de1b843255a4a7faffected2b5e19677592c167d012c2d129407f39d2bdeb8d to < 4a4e3fa77ea36d3419d806fb5883ef425a605a5daffected2b5e19677592c167d012c2d129407f39d2bdeb8d to < ae97fff6495a8764bc0ef281cfe5444f701e527faffected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/f0afcec2129c166e61821d6ae097061155f01b12 ↗
- https://git.kernel.org/stable/c/b51f5a310bd6888b90bb9546a8081215dcfe6fbe ↗
- https://git.kernel.org/stable/c/632f7acfe6dac1278a9314eaaab14fada400ddaf ↗
- https://git.kernel.org/stable/c/41bee71112db53651ba9a9030de1b843255a4a7f ↗
- https://git.kernel.org/stable/c/4a4e3fa77ea36d3419d806fb5883ef425a605a5d ↗
- https://git.kernel.org/stable/c/ae97fff6495a8764bc0ef281cfe5444f701e527f ↗