Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P action frame handling without device vif Some P2P action frame paths assume the P2P device vif is always available. That is not true when userspace sends non-P2P public action frames through the primary interface, or when action-frame abort runs after the P2P device vif has not been created. Fall back to the primary vif when aborting an action frame without a P2P device vif, and guard P2P device saved IE access before using it for peer channel search.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b before 66b89c6a7da47efb38a9b839c2ae221b23a1c88b; affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b before 6641ba636bf675b2634c49fe818931cf6ca8f547; affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b before f334b26b884dff5d0a558dc464fa55f300868a68; affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b before f26e1b16904555e171292e183c3cfc1c38159fc5; affected 6eda4e2c54255cd26a58d2fcec73ec3bff7a515b before 1b1edb9ebed49099bdc924cef49a9aea8b552199 |
| Linux / Linux | affected 3.9; unaffected 0 before 3.9; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 7.2.6 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/66b89c6a7da47efb38a9b839c2ae221b23a1c88b
- https://git.kernel.org/stable/c/6641ba636bf675b2634c49fe818931cf6ca8f547
- https://git.kernel.org/stable/c/f334b26b884dff5d0a558dc464fa55f300868a68
- https://git.kernel.org/stable/c/f26e1b16904555e171292e183c3cfc1c38159fc5
- https://git.kernel.org/stable/c/1b1edb9ebed49099bdc924cef49a9aea8b552199