[SRU Focal 0/3] CVE-2022-2022-42719

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Mon Oct 17 12:46:14 UTC 2022


[Impact]
A nearby attacker can spoof beacon frames that cause a UAF.

[Fix and backport]
Johannes Berg came up with a different fix for 5.4.

[Potential regression]
Users wifi stop working.

Johannes Berg (3):
  mac80211: mlme: find auth challenge directly
  wifi: mac80211: don't parse mbssid in assoc response
  wifi: mac80211: fix MBSSID parsing use-after-free

 net/mac80211/ieee80211_i.h |  4 ++--
 net/mac80211/mlme.c        | 21 +++++++++++++--------
 net/mac80211/scan.c        |  2 ++
 net/mac80211/util.c        | 11 ++++++-----
 4 files changed, 23 insertions(+), 15 deletions(-)

-- 
2.34.1




More information about the kernel-team mailing list