CVE-2021-47602 mac80211: track only QoS data frames for admission control
A missing check in the Linux kernel mac80211 subsystem allows a local attacker to cause a denial of service via a crafted non-QoS null function packet.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-47602?
CVE-2021-47602 is a medium-severity vulnerability in Linux kernel, published on 19 Jun 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header.
Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header.
Fix this to only do anything for QoS data packets.
Weakness: CWE-824
Which versions are affected by CVE-2021-47602?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-47602?
Apply the vendor's patch.
Is CVE-2021-47602 being exploited?
There is no known exploitation of CVE-2021-47602 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-47602, GHSA-g68j-9rxj-c36w, UBUNTU-CVE-2021-47602.