mac80211: track only QoS data frames for admission control (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 13 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: mac80211: track only QoS data frames for admission control For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header. Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header. Fix this to only do anything for QoS data packets.
Weaknesses (CWE)
- CWE-824 — Access of Uninitialized Pointer
References
- https://git.kernel.org/stable/c/69f054d6642c8f6173724ce17e7ee3ff66b8f682
- https://git.kernel.org/stable/c/46b9e29db2012a4d2a40a26101862e002ccf387b
- https://git.kernel.org/stable/c/eed897a22230e3231a740eddd7d6d95ba476625f
- https://git.kernel.org/stable/c/42d08e97b196479f593499e887a9ab81446a34b9
- https://git.kernel.org/stable/c/d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981a
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2021-34604
- GCVE · GCVE-0-2021-47602
CERT-FR advisories
- CERTFR-2025-AVI-0308 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0693 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0610 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0578 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 3.19 < 4.19.222cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.4.168cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.5 < 5.10.88cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.11cpe:2.3:o:linux:linux_kernel:5.16:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.16:rc5:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 02219b3abca59fca81711bfe7ee78df7abad97ce < 69f054d6642c8f6173724ce17e7ee3ff66b8f682 ; affected 02219b3abca59fca81711bfe7ee78df7abad97ce < 46b9e29db2012a4d2a40a26101862e002ccf387b ; affected 02219b3abca59fca81711bfe7ee78df7abad97ce < eed897a22230e3231a740eddd7d6d95ba476625f ; affected 02219b3abca59fca81711bfe7ee78df7abad97ce < 42d08e97b196479f593499e887a9ab81446a34b9 ; affected 02219b3abca59fca81711bfe7ee78df7abad97ce < d5e568c3a4ec2ddd23e7dc5ad5b0c64e4f22981a |
| Linux · Linux | affected 3.19 ; unaffected 0 < 3.19 ; unaffected 4.19.222 ≤ 4.19.* ; unaffected 5.4.168 ≤ 5.4.* ; unaffected 5.10.88 ≤ 5.10.* ; unaffected 5.15.11 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |