Bug 2025003 (CVE-2021-43976) - CVE-2021-43976 kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker to cause DoS via crafted USB device
Summary: CVE-2021-43976 kernel: mwifiex_usb_recv() in drivers/net/wireless/marvell/mwi...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2021-43976
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2025004 2025323 2025324 2025325 2027747
Blocks: 2025007
TreeView+ depends on / blocked
 
Reported: 2021-11-19 16:53 UTC by Guilherme de Almeida Suckevicz
Modified: 2022-06-16 11:23 UTC (History)
44 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A denial of service flaw was found in mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c in the usb subsystem of the Linux kernel. This is due to a missing clean-up for a malfunctioning usb device with an unknown recv_type.
Clone Of:
Environment:
Last Closed: 2022-05-11 12:16:28 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2022:2229 0 None None None 2022-05-12 11:26:52 UTC
Red Hat Product Errata RHBA-2022:4630 0 None None None 2022-05-18 11:46:38 UTC
Red Hat Product Errata RHBA-2022:4693 0 None None None 2022-05-19 05:11:04 UTC
Red Hat Product Errata RHBA-2022:4969 0 None None None 2022-06-08 18:40:11 UTC
Red Hat Product Errata RHBA-2022:5088 0 None None None 2022-06-16 11:23:25 UTC
Red Hat Product Errata RHSA-2022:1975 0 None None None 2022-05-10 14:40:12 UTC
Red Hat Product Errata RHSA-2022:1988 0 None None None 2022-05-10 14:46:14 UTC

Description Guilherme de Almeida Suckevicz 2021-11-19 16:53:24 UTC
A denial-of-service flaw was found in mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c in the usb subsystem, due to a missing clean-up for a malfunctioning usb device with an unknown recv_type. 

Reference and upstream patch:
https://patchwork.kernel.org/project/linux-wireless/patch/YX4CqjfRcTa6bVL+@Zekuns-MBP-16.fios-router.home/

Comment 1 Guilherme de Almeida Suckevicz 2021-11-19 16:54:04 UTC
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2025004]

Comment 8 errata-xmlrpc 2022-05-10 14:40:10 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:1975 https://access.redhat.com/errata/RHSA-2022:1975

Comment 9 errata-xmlrpc 2022-05-10 14:46:10 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2022:1988 https://access.redhat.com/errata/RHSA-2022:1988

Comment 10 Product Security DevOps Team 2022-05-11 12:16:24 UTC
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):

https://access.redhat.com/security/cve/cve-2021-43976


Note You need to log in before you can comment on or make changes to this bug.