]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
wifi: mac80211: fix crash in beacon protection for P2P-device
authorJohannes Berg <johannes.berg@intel.com>
Wed, 5 Oct 2022 19:24:10 +0000 (21:24 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 15 Oct 2022 06:02:58 +0000 (08:02 +0200)
commit8ed62f2df8ebcf79c185f1bc3e4f346ea0905da6
tree896c403a651c1b24c9b04be02ea503a40d5eafbe
parentd484f564f49dc7e302f85c9cbc90e72e585e926d
wifi: mac80211: fix crash in beacon protection for P2P-device

commit b2d03cabe2b2e150ff5a381731ea0355459be09f upstream.

If beacon protection is active but the beacon cannot be
decrypted or is otherwise malformed, we call the cfg80211
API to report this to userspace, but that uses a netdev
pointer, which isn't present for P2P-Device. Fix this to
call it only conditionally to ensure cfg80211 won't crash
in the case of P2P-Device.

This fixes CVE-2022-42722.

Reported-by: Sönke Huster <shuster@seemoo.tu-darmstadt.de>
Fixes: 9eaf183af741 ("mac80211: Report beacon protection failures to user space")
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/rx.c