ACK: [SRU Focal 0/3] CVE-2022-2022-42719

Cengiz Can cengiz.can at canonical.com
Mon Oct 17 14:15:17 UTC 2022


On Mon, 2022-10-17 at 09:46 -0300, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A nearby attacker can spoof beacon frames that cause a UAF.
> 
> [Fix and backport]
> Johannes Berg came up with a different fix for 5.4.
> 
> [Potential regression]
> Users wifi stop working.
> 
> Johannes Berg (3):
>   mac80211: mlme: find auth challenge directly
>   wifi: mac80211: don't parse mbssid in assoc response
>   wifi: mac80211: fix MBSSID parsing use-after-free

Acked-by: Cengiz Can <cengiz.can at canonical.com>

> 
>  net/mac80211/ieee80211_i.h |  4 ++--
>  net/mac80211/mlme.c        | 21 +++++++++++++--------
>  net/mac80211/scan.c        |  2 ++
>  net/mac80211/util.c        | 11 ++++++-----
>  4 files changed, 23 insertions(+), 15 deletions(-)
> 
> -- 
> 2.34.1
> 
> 




More information about the kernel-team mailing list