Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown On ifup, AP_VLAN interfaces get crypto_tx_tailroom_needed_cnt from the AP interface, but it's never decremented again unless the AP is also brought down. Thus, bringing the same AP_VLAN up again will increment the counter again and eventually hit the sanity check: WARN_ON_ONCE(sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt); Reset it on ifdown to avoid that.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < b0b32d3f163d24ea7134380666193bf398e9dc0baffectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < f6b34a7d64324faf28eedc0f8678b0f832f1cc36affectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 304a874670a0b6ab5589a7f60b4af0251797b121affectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 7775759e3cb35ef5a571b2d877c2a9b70a5d5f08affectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 3d76b45e8432c0d75fcb9e90d92eaa3176898adfaffectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 4b54d01b48445b66c9e576de92b90a3a3ae7b34aaffectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 875835377d8d62c849b4eb03a7abfafa71d7668faffectedf9dca80b98caac8b4bfb43a2edf1e9f877ccf322 to < 4504f3960dc4501c73be9f99eabda2e26e9db41eaffected
Linux Linux
Default version status: affected
4.1affected0 to < 4.1unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.112 to ≤ 6.12.*unaffected6.18.54 to ≤ 6.18.*unaffected7.2.8 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b0b32d3f163d24ea7134380666193bf398e9dc0b ↗
- https://git.kernel.org/stable/c/f6b34a7d64324faf28eedc0f8678b0f832f1cc36 ↗
- https://git.kernel.org/stable/c/304a874670a0b6ab5589a7f60b4af0251797b121 ↗
- https://git.kernel.org/stable/c/7775759e3cb35ef5a571b2d877c2a9b70a5d5f08 ↗
- https://git.kernel.org/stable/c/3d76b45e8432c0d75fcb9e90d92eaa3176898adf ↗
- https://git.kernel.org/stable/c/4b54d01b48445b66c9e576de92b90a3a3ae7b34a ↗
- https://git.kernel.org/stable/c/875835377d8d62c849b4eb03a7abfafa71d7668f ↗
- https://git.kernel.org/stable/c/4504f3960dc4501c73be9f99eabda2e26e9db41e ↗