Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c9c99f8938e41b878802d5d8481d6f7a212515b0 to < 51092dc769f021e9634474e1bd5a561da477fbdbaffectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < a6ed4c00ccdc15011a73daa2b38af9fc5a2c543eaffectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < 80d1a110e9096b5bf41497f6b151154084862385affectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < a78689e2beed200d4590318612c74ae25c9408cfaffectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < 7a5ef1fd654d0e90d59aa32c881789c8bcc4125aaffectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < 9df64ad43e1f2c036667bba2bf385e9d7b3af564affectedc9c99f8938e41b878802d5d8481d6f7a212515b0 to < 4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60faffected
Linux Linux
Default version status: affected
4.2affected0 to < 4.2unaffected5.10.271 to ≤ 5.10.*unaffected5.15.222 to ≤ 5.15.*unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.111 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/51092dc769f021e9634474e1bd5a561da477fbdb ↗
- https://git.kernel.org/stable/c/a6ed4c00ccdc15011a73daa2b38af9fc5a2c543e ↗
- https://git.kernel.org/stable/c/80d1a110e9096b5bf41497f6b151154084862385 ↗
- https://git.kernel.org/stable/c/a78689e2beed200d4590318612c74ae25c9408cf ↗
- https://git.kernel.org/stable/c/7a5ef1fd654d0e90d59aa32c881789c8bcc4125a ↗
- https://git.kernel.org/stable/c/9df64ad43e1f2c036667bba2bf385e9d7b3af564 ↗
- https://git.kernel.org/stable/c/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f ↗