Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

linux mac80211 - vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-4026
The mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (panic) via a crafted Delete Block ACK (aka DELBA) packet, related to an erroneous "code shuffling patch."
Linux Linux Kernel 2.6.27.29Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.39Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.31Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.32Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.15.3
NA
CVE-2009-4027
Race condition in the mac80211 subsystem in the Linux kernel prior to 2.6.32-rc8-next-20091201 allows remote malicious users to cause a denial of service (system crash) via a Delete Block ACK (aka DELBA) packet that triggers a certain state change in the absence of an aggregation...
Linux Linux Kernel 2.6.27.29Linux Linux Kernel 2.6.27.12Linux Linux Kernel 2.6.20.6Linux Linux Kernel 2.6.20.9Linux Linux Kernel 2.6.11Linux Linux Kernel 2.6.23.4Linux Linux Kernel 2.6.22.15Linux Linux Kernel 2.6.16.16Linux Linux Kernel 2.6.18.7Linux Linux Kernel 2.6.17.12Linux Linux Kernel 2.6.16.39Linux Linux Kernel 2.6.27.3Linux Linux Kernel 2.6.31Linux Linux Kernel 2.6.29.3Linux Linux Kernel 2.6.21Linux Linux Kernel 2.6.16.9Linux Linux Kernel 2.6.17.9Linux Linux Kernel 2.6.32Linux Linux Kernel 2.6.11.2Linux Linux Kernel 2.6.27.1Linux Linux Kernel 2.6.5Linux Linux Kernel 2.6.15.3
5.5
CVSSv3
CVE-2021-38206
The mac80211 subsystem in the Linux kernel prior to 5.12.13, when a device supporting only 5 GHz is used, allows malicious users to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.
Linux Linux Kernel
5.5
CVSSv3
CVE-2022-42722
In the Linux kernel 5.8 up to and including 5.19.x prior to 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.
Linux Linux KernelFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
8.8
CVSSv3
CVE-2022-42719
A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 up to and including 5.19.x prior to 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.
Linux Linux KernelFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2022-42720
Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 up to and including 5.19.x prior to 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.
Linux Linux KernelFedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
5.5
CVSSv3
CVE-2022-42721
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 up to and including 5.19.x prior to 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.
Linux Linux KernelFedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37Debian Debian Linux 10.0Debian Debian Linux 11.0
6.4
CVSSv3
CVE-2021-3573
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hci_unregister_dev() together with one of the calls hci_sock_blacklist_add(), hci_sock_blackl...
Linux Linux Kernel 5.13Linux Linux KernelRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Fedoraproject Fedora 34
7.8
CVSSv3
CVE-2021-4037
A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a direct...
Linux Linux KernelDebian Debian Linux 10.0Debian Debian Linux 11.0
7.8
CVSSv3
CVE-2021-3489
The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an malicious user to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed ...
Linux Linux KernelLinux Linux Kernel 5.13Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 20.10Canonical Ubuntu Linux 21.04
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook