mirror_ubuntu-kernels/net/mac80211
Johannes Berg 8a48b39b48 UBUNTU: SAUCE: wifi: mac80211: fix crash in beacon protection for P2P-device
If beacon protection is active but the beacon cannot be
decrypted or is otherwise malformed, we call the cfg80211
API to report this to userspace, but that uses a netdev
pointer, which isn't present for P2P-Device. Fix this to
call it only conditionally to ensure cfg80211 won't crash
in the case of P2P-Device.

This fixes CVE-2022-42722.

Reported-by: Sönke Huster <shuster@seemoo.tu-darmstadt.de>
Fixes: 9eaf183af7 ("mac80211: Report beacon protection failures to user space")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>

CVE-2022-42722
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Kamal Mostafa <kamal@canonical.com>
Acked-by: Luke Nowakowski-Krijger <luke.nowakowskikrijger@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
2022-10-13 09:21:47 +02:00
..
aead_api.c
aead_api.h
aes_ccm.h
aes_cmac.c
aes_cmac.h
aes_gcm.h
aes_gmac.c
aes_gmac.h
agg-rx.c mac80211: fix memory leaks with element parsing 2022-10-13 09:21:46 +02:00
agg-tx.c
airtime.c
cfg.c
chan.c
debug.h
debugfs_key.c
debugfs_key.h
debugfs_netdev.c
debugfs_netdev.h
debugfs_sta.c
debugfs_sta.h
debugfs.c
debugfs.h
driver-ops.c
driver-ops.h
ethtool.c
fils_aead.c
fils_aead.h
he.c
ht.c
ibss.c mac80211: fix memory leaks with element parsing 2022-10-13 09:21:46 +02:00
ieee80211_i.h UBUNTU: SAUCE: wifi: mac80211: fix MBSSID parsing use-after-free 2022-10-13 09:21:46 +02:00
iface.c
Kconfig
key.c
key.h
led.c
led.h
main.c
Makefile
mesh_hwmp.c mac80211: always allocate struct ieee802_11_elems 2022-10-13 09:21:46 +02:00
mesh_pathtbl.c
mesh_plink.c mac80211: always allocate struct ieee802_11_elems 2022-10-13 09:21:46 +02:00
mesh_ps.c
mesh_sync.c mac80211: mesh: clean up rx_bcn_presp API 2022-10-13 09:21:45 +02:00
mesh.c mac80211: always allocate struct ieee802_11_elems 2022-10-13 09:21:46 +02:00
mesh.h
michael.c
michael.h
mlme.c mac80211: fix memory leaks with element parsing 2022-10-13 09:21:46 +02:00
ocb.c
offchannel.c
pm.c
rate.c
rate.h
rc80211_minstrel_ht_debugfs.c
rc80211_minstrel_ht.c
rc80211_minstrel_ht.h
rx.c UBUNTU: SAUCE: wifi: mac80211: fix crash in beacon protection for P2P-device 2022-10-13 09:21:47 +02:00
s1g.c
scan.c mac80211: always allocate struct ieee802_11_elems 2022-10-13 09:21:46 +02:00
spectmgmt.c
sta_info.c
sta_info.h
status.c
tdls.c mac80211: always allocate struct ieee802_11_elems 2022-10-13 09:21:46 +02:00
tkip.c
tkip.h
trace_msg.h
trace.c
trace.h
tx.c
util.c UBUNTU: SAUCE: wifi: mac80211: fix MBSSID parsing use-after-free 2022-10-13 09:21:46 +02:00
vht.c
wep.c
wep.h
wme.c wifi: mac80211: fix queue selection for mesh/OCB interfaces 2022-09-16 10:52:35 +02:00
wme.h
wpa.c mac80211: fix use-after-free in CCMP/GCMP RX 2021-09-27 11:59:49 +02:00
wpa.h