kernel: mac80211: fix potential double free on mesh join

In the Linux kernel, the following vulnerability has been resolved: mac80211: fix potential double free on mesh join While commit 6a01afcf8468 "mac80211: mesh: Free ie data when leaving mesh" fixed a memory leak on mesh leave / teardown it introduced a potential memory corruption caused by a doub...

GSD-2022-1007445 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.219 by commit...

GSD-2022-1007329 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.149 by commit...

GSD-2022-1007327 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.148 by commit...

GSD-2022-1007154 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.74 by commit...

GSD-2022-1007153 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.74 by commit...

GSD-2022-1006927 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006923 wifi: mac80211: fix crash in beacon protection for P2P-device

wifi: mac80211: fix crash in beacon protection for P2P-device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.2 by commit...

GSD-2022-1006863 wifi: mac80211: fix use-after-free

wifi: mac80211: fix use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit aebef10affe16228462af680b88751bf137e2856, it...

PT-2022-35182 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue is related to a use-after-free error in the MBSSID parsing component of the mac80211 wifi module. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-35118 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: A potential security issue exists due to a use-after-free condition in the mac80211 component of the wifi functionality. The actual impact and attack plausibility have not yet been proven...

PT-2022-35409 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.74 Description: A use-after-free issue exists in the mac80211 component of the Linux Kernel, related to MBSSID parsing. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35582 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.148 Description: A potential issue in the wifi mac80211 component may cause a crash in beacon protection for P2P-device. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35178 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: A potential issue in the wifi mac80211 component may cause a crash in beacon protection for P2P-device. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-35408 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.74 Description: A potential issue in the wifi mac80211 component may cause a crash in beacon protection for P2P-device. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-35584 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.149 Description: A use-after-free issue exists in the wifi mac80211 component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.74 and fixes at least the following security issues: A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest VM...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-5691-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5691-1 advisory. David Bouman and Billy Jheng Bing Jhong discovered that a race condition existed in the iouring subsystem in the Linux kernel, leading to a...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists in BSS handling in the mac80211 stack which allows an attacker to inject and execute arbitrary codes...

Denial Of Service (DoS)

Linux kernel is vulnerable to denial of service. The vulnerability exists in mac80211 stack when parsing a multi-BSSID element which allows an attacker to execute arbitrary codes and crash the system...