Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can carry a radiotap field requesting a bandwidth, which mac80211 passes down to the driver regardless of the the actual operational bandwidth. If the bandwidth requested is too wide, that triggers a warning in hwsim: WARN_ON(hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw)) Drop such frames entirely instead since they cannot be sent.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 646e76bb5daf4ca38438c69ffb72cccb605f3466 before a5c715eda066cba5ce3372759188ba8636dca629; affected 646e76bb5daf4ca38438c69ffb72cccb605f3466 before 73f48f7e16cadfc74f444ccd10c1d3ae253e2e27; affected 646e76bb5daf4ca38438c69ffb72cccb605f3466 before c69718519a81e87284494d0c6e6eb7bdd834707a; affected 646e76bb5daf4ca38438c69ffb72cccb605f3466 before e14bf37bb2b3853012ff160131d1c6233f7a9cc9 |
| Linux / Linux | affected 4.7; unaffected 0 before 4.7; unaffected 6.12.112 through 6.12.*; unaffected 6.18.54 through 6.18.*; unaffected 7.2.8 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.