CVE-2014-2706: Race Condition
A Linux kernel built with a Generic IEEE 802.11 Networking Stack (CONFIGMAC80211) is vulnerable to a crash caused by a race condition in frame transmission path and station wakeup event, in case when it's sleeping. The crash occurs because, mac80211 stack buffers frames when the station is sleeping, and the same are transmitted upon the station's(STA) wakeup. At this point, a buffered TX frame list is being emptied, while a new frame is being added to the RX list.
A remote unprivileged user/program could use this flaw to crash the system kernel, resulting in DoS.
Upstream fix: ------------- -> https://git.kernel.org/linus/1d147bfa64293b2723c4fec50922168658e613ba
Reference: ---------- -> http://seclists.org/oss-sec/2014/q2/7
Other sources
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLANSTAPSSTA state (aka power-save mode), related to stainfo.c and tx.c.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernel (mac80211 subsystem)to a version that resolves this vulnerability.Fixed in 3.13.7Patch 1d147bfa64293b2723c4fec50922168658e613ba - Compensating control
Mitigate by restricting/limiting remote network traffic that interacts with mac80211 WLAN_STA_PS_STA (power-save) behavior until the kernel is updated to 3.13.7 or later.
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2706?
CVE-2014-2706 has been rated as a high severity vulnerability due to the potential to cause crashes in affected systems.
How do I fix CVE-2014-2706?
To fix CVE-2014-2706, you should upgrade your Linux kernel to a version that includes the security patch, specifically 3.13.7 or newer, and appropriate patched versions for specific distributions.
Which systems are affected by CVE-2014-2706?
CVE-2014-2706 affects various systems including specific versions of the Linux kernel as well as Google Android and Oracle Linux.
What happens if CVE-2014-2706 is exploited?
If exploited, CVE-2014-2706 may lead to a crash of the kernel, disrupting the operation of affected systems.
Are there any known exploits for CVE-2014-2706?
As of now, there are no widely reported active exploits for CVE-2014-2706, but its potential impact necessitates immediate patching.