Linux Kernel 'net/mac80211/tx. c' Information Leakage Vulnerability

Linux Kernel 'net/mac80211/tx. c' Information Leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Linux kernel <3.13.5
Description:
Bugtraq id: 70965
CVE (CAN) ID: CVE-2014-8709

Linux Kernel is the Kernel of the Linux operating system.

In versions earlier than Linux Kernel 3.13.5, The ieee80211_fragment function in net/mac80211/tx. c does not properly retain some trailing pointers. Remote attackers can exploit this vulnerability to obtain sensitive plaintext information by reading data packets.

<* Source: Jouni Malinen
*>

Suggestion:
Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f
Http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.13.5
Http://git.kernel.org /? P = linux/kernel/git/torvalds/linux-2.6.git; a = commit; h = 338f977f4eb441e69bb9a46eaa0ac715c931a67f

The Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5

Linux Kernel 3.4.62 LTS is now available for download

How to install Linux kernel 13.10 On Ubuntu 3.12

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: