kernel: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

SUSE CVE-2006-7178

MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of service system crash via a certain AUTH frame...

SUSE CVE-2019-14896

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to...

CVE-2022-33252

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...

CVE-2022-33252 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...

CVE-2022-33252

CVE-2022-33252 is a reported information disclosure due to a buffer over-read in WLAN when handling IBSS beacons frames. The vulnerability is described across multiple feeds (NVD/Red Hat/NCSC/PRION/CVE lists) as affecting WLAN/buffer handling, with the issue categorized under information disclosu...

PT-2023-13263 · Qualcomm · Snapdragon +150

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to information disclosure due to a buffer over-read in WLAN when handling IBSS beacons frames. Recommendations: At the moment, ther...

CVE-2022-33252: Out-of-bounds Read

Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame...

GSD-2022-1005709 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

PT-2022-33967 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.142 Description: The issue is related to the wifi mac80211 component in IBSS mode. When the state is disconnected, the CSA should not be finalized. The actual impact and attack plausibility have not yet be...

GSD-2022-1005183 wifi: cfg80211: handle IBSS in channel switch

wifi: cfg80211: handle IBSS in channel switch This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1004965 wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.8 by commit...

PT-2022-33441 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the handling of IBSS in channel switch in the cfg80211 module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-33653 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: The issue is related to the wifi mac80211 in IBSS mode. It was introduced in version v3.13 and fixed in Linux Kernel version v5.15.66. The actual impact and attack plausibility have not yet...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

Buffer overflow

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2021-35081

CVE-2021-35081 is a Qualcomm-related vulnerability described as a buffer overflow caused by improper validation of SSID length received from beacon or probe response during an IBSS session. Affected products span Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connectivity, Industria...

PT-2022-10402

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session. This affects various...