CVE-2021-47194: cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
In the Linux kernel, the following vulnerability has been resolved:
cfg80211: call cfg80211stopap when switch from P2PGO type
If the userspace tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsg(NL80211CMDSETINTERFACE), it does not call the cleanup cfg80211stopap(), this leads to the initialization of in-use data. For example, this path re-init the sdata->assignedchanctxlist while it is still an element of assignedvifs list, and makes that linked list corrupt.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47194?
CVE-2021-47194 has a medium severity rating due to its potential impact on network configuration in vulnerable Linux kernel versions.
How do I fix CVE-2021-47194?
To fix CVE-2021-47194, update the Linux kernel to version 5.10.223-1 or later.
What versions of the Linux kernel are affected by CVE-2021-47194?
CVE-2021-47194 affects Linux kernel versions between 3.6.0 and 5.15.5.
What is the nature of the vulnerability described in CVE-2021-47194?
CVE-2021-47194 is related to a failure in cleaning up network configurations when switching interface types.
Which Linux distributions should be concerned about CVE-2021-47194?
Linux distributions using affected versions of the Linux kernel should monitor CVE-2021-47194 and apply necessary updates.