Commit 37c000fe authored by Johannes Berg's avatar Johannes Berg Committed by Hui Tang
Browse files

mac80211: validate extended element ID is present

stable inclusion
from stable-v4.19.222
commit 03029bb044ccee60adbc93e70713f3ae58abc3a1
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/IA6SIX
CVE: CVE-2021-47611

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=03029bb044ccee60adbc93e70713f3ae58abc3a1



---------------------------

commit 768c0b19 upstream.

Before attempting to parse an extended element, verify that
the extended element ID is present.

Fixes: 41cbb0f5 ("mac80211: add support for HE")
Reported-by: default avatar <syzbot+59bdff68edce82e393b6@syzkaller.appspotmail.com>
Link: https://lore.kernel.org/r/20211211201023.f30a1b128c07.I5cacc176da94ba316877c6e10fe3ceec8b4dbd7d@changeid


Cc: stable@vger.kernel.org
Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarHui Tang <tanghui20@huawei.com>
parent 91b7ac39
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment