CVE-2021-47602

mac80211: track only QoS data frames for admission control

published June 19, 2024

CVSS
—
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mac80211: track only QoS data frames for admission control

For admission control, obviously all of that only works for

QoS data frames, otherwise we cannot even access the QoS

field in the header.

Syzbot reported (see below) an uninitialized value here due

to a status of a non-QoS nullfunc packet, which isn't even

long enough to contain the QoS header.

Fix this to only do anything for QoS data packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Published
2024-06-19T14:54Z
EPSS history
Timeline
  • 19 JUN 14:54Z
    mac80211: track only QoS data frames for admission control
    cvelistv5