In the Linux kernel, the following vulnerability has been resolved:
mac80211: track only QoS data frames for admission control
For admission control, obviously all of that only works for QoS data frames, otherwise we cannot even access the QoS field in the header.
Syzbot reported (see below) an uninitialized value here due to a status of a non-QoS nullfunc packet, which isn't even long enough to contain the QoS header.
Fix this to only do anything for QoS data packets.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 19, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-default | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-4.4.0-1143-kvm | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub