In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
wifi: mac80211: unlist vifs when their netdev is unregistered<\/p>\n
mac80211 only removes vifs from the local->interfaces list when
\nan interface is removed via ieee80211_if_remove(), before it
\nunregisters the netdev. However, it’s possible for a netdev to
\nbe unregistered without going through that: When the netns that
\nholds the wiphy is destroyed, the wiphy is supposed to move to
\nthe init_ns, but that can run into allocation failures.<\/p>\n
Then, mac80211 has an interface listed that doesn’t exist, and
\nwill eventually hit<\/p>\n
BUG: failure at net\/wireless\/core.h:141\/wiphy_to_rdev()!
\n …
\n _cfg80211_unregister_wdev+0x24\/0x36a [cfg80211]
\n cfg80211_unregister_wdev+0x15\/0x1d [cfg80211]
\n ieee80211_remove_interfaces+0x1ff\/0x257 [mac80211]
\n ieee80211_unregister_hw+0x73\/0x1d1 [mac80211]
\n mac80211_hwsim_del_radio+0x114\/0x166 [mac80211_hwsim]<\/p>\n
Remove the interface from the list in ->ndo_uninit if it’s still
\naround to avoid this.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
wifi: mac80211: unlist vifs when their netdev is unregistered<\/p>\n
mac80211 only removes vifs from the local->interfaces list when
\nan i<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-33400","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/33400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=33400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=33400"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=33400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}