wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU (Linux Linux)

CVE-2023-54052
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.24 % · centile 15 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Deferred

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be dropped if the frame is aggregated in AMSDU. When the problem shows up, some SKBs would be hold in driver to cause network stopped temporarily. Even if the problem can be recovered by txs timeout handling, mt7921 still need to disable txs in AMSDU to avoid this issue.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected 163f4d22c118d4eb9e275bf9ee1577c0d14b3208 < 1cd102aaedb277fbe81dd08cd9f5cae951de2bff ; affected 163f4d22c118d4eb9e275bf9ee1577c0d14b3208 < e74778e91fedc3b2a0143264887bbb32508c5000 ; affected 163f4d22c118d4eb9e275bf9ee1577c0d14b3208 < bf5d3fad7219b8de7d3a9cb59f0ea5243b018f07 ; affected 163f4d22c118d4eb9e275bf9ee1577c0d14b3208 < b642f4c5f3de0a8f47808d32b1ebd9c427a42a66
Linux · Linuxaffected 5.12 ; unaffected 0 < 5.12 ; unaffected 6.1.52 ≤ 6.1.* ; unaffected 6.4.15 ≤ 6.4.* ; unaffected 6.5.2 ≤ 6.5.* ; unaffected 6.6 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD