CVE-2021-38206: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernel mac80211 subsystemto a version that resolves this vulnerability.Fixed in 5.12.13
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38206?
CVE-2021-38206 is classified as a denial of service vulnerability due to a NULL pointer dereference in the mac80211 subsystem of the Linux kernel.
How do I fix CVE-2021-38206?
To mitigate CVE-2021-38206, you should upgrade to Linux kernel version 5.12.13 or later to address the vulnerability.
What systems are affected by CVE-2021-38206?
CVE-2021-38206 affects Linux kernel versions prior to 5.12.13 when using devices that only support 5 GHz networks.
What is the impact of CVE-2021-38206?
The impact of CVE-2021-38206 is that attackers can trigger a denial of service, which makes the network device inoperable.
Is CVE-2021-38206 patched in later kernel versions?
Yes, CVE-2021-38206 is patched in Linux kernel version 5.12.13 and subsequent releases.