Search Linux Wireless

Re: BUG: KASAN: use-after-free in ieee80211_mgd_auth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2023-01-23 at 22:50 +0100, Alexander Wetzel wrote:
> > 
> Ancient bug. The problematic code was added with
> 'commit fffd0934b939 ("cfg80211: rework key operation")'
> in 2009, kernel 2.6.32.
> 
> The fix is trivial, I'll probably just zero key and key-len when not 
> using wext. But maybe I find a more wext-only solution.
> 

Is that actually good enough - what if you have wext and then wext
again, but didn't use it or something?

johannes




[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Wireless Personal Area Network]     [Linux Bluetooth]     [Wireless Regulations]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite Hiking]     [MIPS Linux]     [ARM Linux]     [Linux RAID]

  Powered by Linux