CVE-2021-47194
published 2024-04-10CVE-2021-47194: In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.25%
16.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
If the userspace tools switch from NL80211_IFTYPE_P2P_GO to
NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it
does not call the cleanup cfg80211_stop_ap(), this leads to the
initialization of in-use data. For example, this path re-init the
sdata->assigned_chanctx_list while it is still an element of
assigned_vifs list, and makes that linked list corrupt.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 5.15.5-1 (bookworm) | linux 5.15.5-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 8f06bb8c216bcd172394f61e557727e691b4cb24 | 8f06bb8c216bcd172394f61e557727e691b4cb24 |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 0738cdb636c21ab552eaecf905efa4a6070e3ebc | 0738cdb636c21ab552eaecf905efa4a6070e3ebc |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 4e458abbb4a523f1413bfe15c079cf4e24c15b21 | 4e458abbb4a523f1413bfe15c079cf4e24c15b21 |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < b8a045e2a9b234cfbc06cf36923886164358ddec | b8a045e2a9b234cfbc06cf36923886164358ddec |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 52affc201fc22a1ab9a59ef0ed641a9adfcb8d13 | 52affc201fc22a1ab9a59ef0ed641a9adfcb8d13 |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 7b97b5776daa0b39dbdadfea176f9cc0646d4a66 | 7b97b5776daa0b39dbdadfea176f9cc0646d4a66 |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 5a9b671c8d74a3e1b999e7a0c7f366079bcc93dd | 5a9b671c8d74a3e1b999e7a0c7f366079bcc93dd |
| linux | linux | >= ac800140c20e7ae51117e71289065bedd4930fc2 < 563fbefed46ae4c1f70cffb8eb54c02df480b2c2 | 563fbefed46ae4c1f70cffb8eb54c02df480b2c2 |
| linux | linux_kernel | >= 0 < 5.10.84-1 | 5.10.84-1 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
| linux | linux_kernel | >= 0 < 5.15.5-1 | 5.15.5-1 |
| linux | linux_kernel | >= 0 < 4.4.0-257.291 | 4.4.0-257.291 |
| linux | linux_kernel | >= 3.6.0 < 4.4.293 | 4.4.293 |
| linux | linux_kernel | >= 4.10.0 < 4.14.256 | 4.14.256 |
| linux | linux_kernel | >= 4.15.0 < 4.19.218 | 4.19.218 |
| linux | linux_kernel | >= 4.20.0 < 5.4.162 | 5.4.162 |
| linux | linux_kernel | >= 4.5.0 < 4.9.291 | 4.9.291 |
| linux | linux_kernel | >= 5.11.0 < 5.15.5 | 5.15.5 |
| linux | linux_kernel | >= 5.5.0 < 5.10.82 | 5.10.82 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2024-07-31·CVSS 5.5
CVE-2021-47194 [MEDIUM] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that the device input subsystem in the Linux kernel did
not properly handle the case when an event code falls outside of a bitmap.
A local attacker could use this to cause a denial of service (system
crash). (CVE-2022-48619)
黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)
It was discovered that a race condition existed in the Bluetooth subsystem
in the Linux kernel when modifying certain settings values through deb
Red Hat
kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
vendor_redhat·2024-04-10·CVSS 7.8
CVE-2021-47194 [HIGH] CWE-99 kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
kernel: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
If the userspace tools switch from NL80211_IFTYPE_P2P_GO to
NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it
does not call the cleanup cfg80211_stop_ap(), this leads to the
initialization of in-use data. For example, this path re-init the
sdata->assigned_chanctx_list while it is still an element of
assigned_vifs list, and makes that linked list corrupt.
A flaw was found in the Linux Kernel, where in-use data initialization in net/wireless/util.c can lead to corrupted data.
Statement: Red Hat Enterprise Linux 9 is not affected by this vulnerability.
Package: kernel (Red Hat En
Debian
CVE-2021-47194: linux - In the Linux kernel, the following vulnerability has been resolved: cfg80211: c...
vendor_debian·2021·CVSS 7.8
CVE-2021-47194 [HIGH] CVE-2021-47194: linux - In the Linux kernel, the following vulnerability has been resolved: cfg80211: c...
In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch from NL80211_IFTYPE_P2P_GO to NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it does not call the cleanup cfg80211_stop_ap(), this leads to the initialization of in-use data. For example, this path re-init the sdata->assigned_chanctx_list while it is still an element of assigned_vifs list, and makes that linked list corrupt.
Scope: local
bookworm: resolved (fixed in 5.15.5-1)
bullseye: resolved (fixed in 5.10.84-1)
forky: resolved (fixed in 5.15.5-1)
sid: resolved (fixed in 5.15.5-1)
trixie: resolved (fixed in 5.15.5-1)
OSV
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
osv·2024-07-31·CVSS 5.5
CVE-2022-48619 [MEDIUM] linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the device input subsystem in the Linux kernel did
not properly handle the case when an event code falls outside of a bitmap.
A local attacker could use this to cause a denial of service (system
crash). (CVE-2022-48619)
黄思聪 discovered that the NFC Controller Interface (NCI) implementation in
the Linux kernel did not properly handle certain memory allocation failure
conditions, leading to a null pointer dereference vulnerability. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2023-46343)
It was discovered that a race condition existed in the Bluetooth subsystem
in the Linux kernel when modifying certain settings values through debugfs.
A privileged local attacker could
OSV
CVE-2021-47194: In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tool
osv·2024-04-10·CVSS 7.8
CVE-2021-47194 [HIGH] CVE-2021-47194: In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tool
In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type If the userspace tools switch from NL80211_IFTYPE_P2P_GO to NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it does not call the cleanup cfg80211_stop_ap(), this leads to the initialization of in-use data. For example, this path re-init the sdata->assigned_chanctx_list while it is still an element of assigned_vifs list, and makes that linked list corrupt.
GHSA
GHSA-p3j3-7q7c-3g53: In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
If the userspace to
ghsa_unreviewed·2024-04-10
CVE-2021-47194 [HIGH] CWE-665 GHSA-p3j3-7q7c-3g53: In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
If the userspace to
In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
If the userspace tools switch from NL80211_IFTYPE_P2P_GO to
NL80211_IFTYPE_ADHOC via send_msg(NL80211_CMD_SET_INTERFACE), it
does not call the cleanup cfg80211_stop_ap(), this leads to the
initialization of in-use data. For example, this path re-init the
sdata->assigned_chanctx_list while it is still an element of
assigned_vifs list, and makes that linked list corrupt.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/0738cdb636c21ab552eaecf905efa4a6070e3ebchttps://git.kernel.org/stable/c/4e458abbb4a523f1413bfe15c079cf4e24c15b21https://git.kernel.org/stable/c/52affc201fc22a1ab9a59ef0ed641a9adfcb8d13https://git.kernel.org/stable/c/563fbefed46ae4c1f70cffb8eb54c02df480b2c2https://git.kernel.org/stable/c/5a9b671c8d74a3e1b999e7a0c7f366079bcc93ddhttps://git.kernel.org/stable/c/7b97b5776daa0b39dbdadfea176f9cc0646d4a66https://git.kernel.org/stable/c/8f06bb8c216bcd172394f61e557727e691b4cb24https://git.kernel.org/stable/c/b8a045e2a9b234cfbc06cf36923886164358ddechttps://git.kernel.org/stable/c/0738cdb636c21ab552eaecf905efa4a6070e3ebchttps://git.kernel.org/stable/c/4e458abbb4a523f1413bfe15c079cf4e24c15b21https://git.kernel.org/stable/c/52affc201fc22a1ab9a59ef0ed641a9adfcb8d13https://git.kernel.org/stable/c/563fbefed46ae4c1f70cffb8eb54c02df480b2c2https://git.kernel.org/stable/c/5a9b671c8d74a3e1b999e7a0c7f366079bcc93ddhttps://git.kernel.org/stable/c/7b97b5776daa0b39dbdadfea176f9cc0646d4a66https://git.kernel.org/stable/c/8f06bb8c216bcd172394f61e557727e691b4cb24https://git.kernel.org/stable/c/b8a045e2a9b234cfbc06cf36923886164358ddec
2024-04-10
Published