Описание
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: validate deauth frame length before reason access
ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame.
Validate the deauth frame length first and only then read the reason code.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: validate deauth frame length before reason access
ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame.
Validate the deauth frame length first and only then read the reason code.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-98891
- https://git.kernel.org/stable/c/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f
- https://git.kernel.org/stable/c/51092dc769f021e9634474e1bd5a561da477fbdb
- https://git.kernel.org/stable/c/7a5ef1fd654d0e90d59aa32c881789c8bcc4125a
- https://git.kernel.org/stable/c/80d1a110e9096b5bf41497f6b151154084862385
- https://git.kernel.org/stable/c/9df64ad43e1f2c036667bba2bf385e9d7b3af564
- https://git.kernel.org/stable/c/a6ed4c00ccdc15011a73daa2b38af9fc5a2c543e
- https://git.kernel.org/stable/c/a78689e2beed200d4590318612c74ae25c9408cf
EPSS
CVE ID
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth reason code before checking that the fixed field is actually present in the received frame. Validate the deauth frame length first and only then read the reason code.
wifi: mac80211: validate deauth frame length before reason access
In the Linux kernel, the following vulnerability has been resolved: w ...
EPSS