CVE-2021-47028

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...

CVE-2021-47028 mt76: mt7915: fix txrate reporting

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...

PT-2024-21443 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the wifi mac80211 component in the Linux kernel, specifically with the fix RCU use in TDLS fast-xmit. The problem arises because the link is looked up under RCU...

PT-2024-8310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential sta-link leak in the mac80211 component of the Linux kernel. When a station is allocated, links are added but not set to valid yet, and if the station...

PT-2024-7695

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a race condition in the mac80211 component of the Linux kernel. This condition can lead to potential crashes due to uninitialized drv priv data when fast-xmit is...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.326.6.el7 - Revert 'md/raid5: Wait for MDSBCHANGEPENDING in raid5d' Junxiao Bi Orabug: 35914789 - md: bypass block throttle for superblock update Junxiao Bi Orabug: 35914789 5.4.17-2136.326.5.el7 - Revert 'tracing: Increase trace array ref count on enable and filter files' Sherry Yang...

kernel: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

A data corruption issues was observed due to an uninitialized driver private data structures in the Linux kernel's wifi mac80211 subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

kernel: Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"

A flaw was found in the mac80211 module in the Linux kernel. When the device can not be registered due to an error, its memory is released twice, causing a NULL pointer to dereference, resulting in a system crash and a denial of service...

PT-2024-14640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been resolved in the Linux kernel related to the wifi: rt2x00 module. When a hardware reset is triggered, all registers are reset, causing all queues to stop in the...

kernel: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

A data corruption issues was observed due to an uninitialized driver private data structures in the Linux kernel's wifi mac80211 subsystem. This could allow a local attacker to crash the system or leak kernel internal information...

kernel: wifi: mac80211: fix memory leak in ieee80211_if_add()

No description is available for this CVE...

PT-2023-9847

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential key use-after-free in the wifi: mac80211 component of the Linux kernel. When ieee80211 key link is called by ieee80211 gtk rekey add but returns 0 due...

PT-2023-9368

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's wifi component, specifically the mac80211 module. A UBSAN warning occurs when the ieee80211 get tx power function returns the INT MIN value,...

CLSA-2023-1693426883 kernel: Fix of 20 CVEs

netfilter: nftsetpipapo: fix improper element removal CVE-2023-4004 - net: tun: fix bugs for oversize packet when napi frags enabled CVE-2023-3812 - net/sched: clsfw: Fix improper refcount update leads to use-after-free CVE-2023-3776 - net/sched: schqfq: account for stab overhead in qfqenqueue...

PT-2025-40751

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mac80211 module related to client probing. Specifically, the code did not first verify the existence of a client before checking the channel context,...

PT-2025-38039

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue in the mac80211 hwsim component where short frames are not properly handled. Specifically, control frames, such as ACK frames, are shorter than expecte...

CLSA-2023-1686585068 kernel: Fix of 26 CVEs

cgroup: Use open-time cgroup namespace for process migration perm checks CVE-2021-4197 - cgroup: Use open-time credentials for process migraton perm checks CVE-2021-4197 - cgroup: cgroup.procs,threads factor out common parts - cgroup: unify attach permission checking - vt: drop old FONT ioctls...

kernel: wifi: mac80211: Fix UAF in ieee80211_scan_rx()

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a null check, but a UAF is observed when the scan is completed and ieee80211scancompleted executes, which then calls cfg80211scandone...

kernel: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

kernel: Denial of service in beacon protection for P2P-device

A flaw was found in P2P-Device in wifi in ieee80211rxhdecrypt in net/mac80211/rx.c in the Linux kernel, leading to a denial of service...