Improper error handling in Linux kernel mac80211

1) Improper error handling

EUVDB-ID: #VU111611

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49942

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the ieee80211_ibss_finish_csa() function in net/mac80211/ibss.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's repository.

Vulnerable software versions

Linux kernel: 5.10 - 5.10.141

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:5.10:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc1:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc2:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc3:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc4:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc5:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10:rc7:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.1:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.2:*:*:*:*:*:*:*
• cpe:2.3:o:linux_foundation:linux_kernel:5.10.3:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/15bc8966b6d3a5b9bfe4c9facfa02f2b69b1e5f0
https://git.kernel.org/stable/c/1691a48aef0a82d1754b9853dae7e3f5cacdf70b
https://git.kernel.org/stable/c/552ba102a6898630a7d16887f29e606d6fabe508
https://git.kernel.org/stable/c/66689c5c02acd4d76c28498fe220998610aec61e
https://git.kernel.org/stable/c/864e280cb3a9a0f5212b16ef5057c4e692f7039d
https://git.kernel.org/stable/c/cdb9a8da9b84800eb15506cd9363cf0cf059e677
https://git.kernel.org/stable/c/d9eb37db6a28b59a95a3461450ee209654c5f95b
https://git.kernel.org/stable/c/dd649b49219a0388cc10fc40e4c2ea681566a780
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.142

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.