Received-SPF: pass (google.com: domain of linux-kernel+bounces-186223-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223;
From: Siddh Raman Pant <siddh.raman.pant@oracle.com>
To: "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org>
CC: "cve@kernel.org" <cve@kernel.org>,
        "linux-cve-announce@vger.kernel.org"
	<linux-cve-announce@vger.kernel.org>,
        "linux-kernel@vger.kernel.org"
	<linux-kernel@vger.kernel.org>
Subject: Re: CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID
 change
Thread-Topic: CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID
 change
Thread-Index: AQHarEOf0ZTx+SdZD06FPnSsziWaGw==
Date: Wed, 22 May 2024 12:28:59 +0000
Message-ID: <42c2fa68c360d05dcf798bc783078270e8fe8314.camel@oracle.com>
In-Reply-To: <2024051701-CVE-2024-27410-874a@gregkh>
Accept-Language: en-US, en-IN
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 
 =?utf-8?B?Nm9vTUd4UXFtek1sL3V1WTFIOWxMUUt2MUtWdjByd3ByYTVUMTR2UGtodGRq?=
 =?utf-8?B?aGE2dE9DemVGTzUyNVExVHdYWWllWUFaQW9aVzVlS2diY0kvM2FNUU4ySXAy?=
 =?utf-8?B?RXVIbVA0aGZDcTlNOENQVERuRDFwaG9zZDJpLytRdjFkWkdvLzNGUS9XSVhI?=
 =?utf-8?B?VHo3d2R3a1ZjbHhRVTQ3UWMyOTVDcGNpSXBvVk8yVXpzVEE2K05JMVBUZUth?=
 =?utf-8?B?NUhidmI5Rmc0ZHExUjYxVU1sR0RZaldEQW91MkhUWmdVb01nVWRVREoyVExL?=
 =?utf-8?B?RGJyc3RDaitiemN4L2ZEaUpuRlk3ZE96dHc1WlcxVDNqLzdWQzVyazdFcDlV?=
 =?utf-8?B?RDlxREtHSlByekVSRVZQVmQxbnpHcE5ndkNhTm9FZVZBREJyOSs3UlFGMEVt?=
 =?utf-8?B?aVF0aXliamhzZU9LbTlzVjZRNmIvQUhpY29pK04vY3RTeW5icDNYbm82aFdI?=
 =?utf-8?B?dnBHVllMVVhFOVBvZDVudGxhK2k4aFR4K05lMGtmbGFkSjB5SVJ1cUVKQ2cw?=
 =?utf-8?B?dmxIeVMzK0lwSk5rQzJ3emtZREY2UE1SVzcxUDRITDVlaVk2STdoWXcwY2RV?=
 =?utf-8?B?NmYrMFZ0cDJ4M2xQaWJyNm1wN0kxdFkyR29QY2NPK3V1Q0Z4MWFGZHFkd2g2?=
 =?utf-8?B?MTB3MjlaR0Urb1BhQWdLQ1JmUzRJRGI2SEVtZ1ZXVHEzWHEyZ3R4dlRKVHB2?=
 =?utf-8?B?bHlUa2FnenRsZy9qRytsUmxLdlZDVWhTUkppUHp4QUk4dHhYNmxNcGZ3Q1oy?=
 =?utf-8?B?Rkh3SkZjNVNudkVpenk5Z21Kd0hoMkNYeXp1b1B4b0ZBcElmS0kvblVYWFVy?=
 =?utf-8?B?SmJzdm5COEZ1S2pTT2J0ZnBOcFl0RzdpS0l6djVtYUdzVHd1Y0Q5V1A4MXl2?=
 =?utf-8?B?a2g5bDJ4Njdab0t3QjVBb0U4M2lROVVkNW1IMHlQMDBrTWVZeHNYQXo0YVU4?=
 =?utf-8?B?WVg1SDFtaEJGZTlWT0lGVHVyTGdHWTVnbEpQbTg0MVRheitONDIwQlNaY1lv?=
 =?utf-8?B?OExOak50OUpTdUdncDVEN1NYOE13NXJxb0gxazdQRFoxMVhxREsxazdIMTJk?=
 =?utf-8?B?Ri9iQVc4cUdoSmZNMUhjek4zQlRTL0V4L1MrelU1bWFSUEVSUmtkeWFFQVV2?=
 =?utf-8?B?S3RQUzN5L1hCVEtRWExWcjdHa1JlTWdzZlk5eDA5TWJLak9HRVhKRkhoVytz?=
 =?utf-8?B?WjJDSG9ZYWExakZsZmVnUDRuWVkyYk1YR2Ixa1hkSEo0VWk5bmlYRTVKS2lm?=
 =?utf-8?B?YUZldmRBTWpNYWRZY2Q4ZXQxWFJTT1hLNHU3TkNzVXJWY080RnI1YU0wSkRR?=
 =?utf-8?B?SW5FZVY2dVJXWkdhSW9JTWtwcTdNbThlQjlvWHRYbmFiVmQrK01uNkJ5YThi?=
 =?utf-8?B?Skx6NEZiUEtKamlOYms5dE5JYWN4MTVlMW85b0tVcDBMdEs1dWNFM0tBQXFn?=
 =?utf-8?B?bzVlakJ6b0FQV2ZZbjlyaWZzdFQrTFF6bC9aTEJvbnltOWQwZ2RPeTdZL2o5?=
 =?utf-8?B?VGhMS241ZGJmZ1hwSjlSU3VZZzlDQ0xLWklOaGJoa0VUN21VSjJwNnRiZnIz?=
 =?utf-8?B?ZEMyaXUyTUFjV042TnFUZUlJMytRd3I0ckRubTVYM1M1dVFKT2hDVHlKTVc0?=
 =?utf-8?B?d1RjOW9GZHdxU1JSV2VJUnNYcnowdHV1Y1ZNRG1idDk2TWc1Y25wQkdEU0RR?=
 =?utf-8?B?VE9vNFh5UG84Z2xpZEVJYjJOYk8zZ0JoMnhFUzJQNEdYbGtxT3F3a3V0OElu?=
 =?utf-8?B?dCtadTI3WncvZGxZRzNPT0JIOFRQZnpISlErWk5hdjJzUUlLYkFWYUp5TXkz?=
 =?utf-8?B?ZzlZSERnMHJZL29WUDBjcFUxMlJjeUVwbmhsNEcrTlMrTW11SmdLdzBYRlR5?=
 =?utf-8?B?OTh0Z1U5VjhEZ0tuZ2pEeXg0bndQT1lEcGZQcEpIR0xDeklxTGxFRE9CSW5r?=
 =?utf-8?B?T3A5TVhCRmllZkV4UjRQY05SVTJXUHl0Q3psWVZYeUpWZjR3Zm8rN1hBS3BB?=
 =?utf-8?B?UWQyMEltOWNZa0tZQkwrS1RlUDFKbWV2eFUxcDdQRTNzMmZpTU1jN1Z3c3hv?=
 =?utf-8?B?T09RN2RTZzhKYkRrVmtzMFhnaVAzTU52TTE4Z1d4V3dvVXRCV0FDbDhOckJL?=
 =?utf-8?B?azh3bW1kWHEzY0t0UmlHSDFaN2dsQ0srSlRZL0I2SmczalRreXNtM0NlSDJD?=
 =?utf-8?Q?Qm3sXOOkmIh/raUNrKwH1cKvXG3MRTVIVgNcjsv0k+Q1?=
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-mc28AfLEfVUZO+gxaMFp"
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-ExternalHop-MessageData-0: 
	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
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: PH0PR10MB5563.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fe2f7587-04bf-41bd-fc4f-08dc7a5ac1ad
X-MS-Exchange-CrossTenant-originalarrivaltime: 22 May 2024 12:28:59.4640
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: vxMFtDxwxac+eU2HZbejj/lAaK0VYJcgqk0EwFSjBBqt7A+GMUIqfyICpjqwDDksYjspJz4OtVQLXa8NgQKAbj5oRmFy5JgE8wgBksPiZJA=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR10MB4185
X-Proofpoint-Virus-Version: vendor=baseguard
 engine=ICAP:2.0.293,Aquarius:18.0.1039,Hydra:6.0.650,FMLib:17.12.28.16
 definitions=2024-05-22_05,2024-05-22_01,2024-05-17_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 bulkscore=0
 suspectscore=0 spamscore=0 mlxscore=0 adultscore=0 mlxlogscore=999
 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2405010000 definitions=main-2405220083
X-Proofpoint-ORIG-GUID: itvHzVjm6YoiGGmVwiH9z6hiksogHx1c
X-Proofpoint-GUID: itvHzVjm6YoiGGmVwiH9z6hiksogHx1c

--=-mc28AfLEfVUZO+gxaMFp
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Fri, 17 May 2024 13:52:02 +0200, Greg Kroah-Hartman wrote:
> In the Linux kernel, the following vulnerability has been resolved:
>=20
> wifi: nl80211: reject iftype change with mesh ID change
>=20
> It's currently possible to change the mesh ID when the
> interface isn't yet in mesh mode, at the same time as
> changing it into mesh mode. This leads to an overwrite
> of data in the wdev->u union for the interface type it
> currently has, causing cfg80211_change_iface() to do
> wrong things when switching.
>=20
> [...]
>=20
> The Linux kernel CVE team has assigned CVE-2024-27410 to this issue.

This does not apply to versions below 6.0, as the union was not backported.
The fix commit mentioned is incorrect, it should be 7b0a0e3c3a88.

Thanks,
Siddh

--=-mc28AfLEfVUZO+gxaMFp
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEQ4+7hHLv3y1dvdaRBwq/MEwk8ioFAmZN5QIACgkQBwq/MEwk
8iqrBhAAgisD+BIpr9WVY/BPEqIQytfV1wdYZGYIevm9qZqzEyPfzN05SXv2J4JA
AkTyAuQH/j2m3it06HubaIfe+vsy6fgza5Gq7TsnSC6T7cap3ZG2NXjqD3RKr4I1
38LkFPpsTx3cKxAiVvYDD3kY9FEPhuak1zBEEHRhkWd0V+Qqp7SRUEsgSrFbyisG
P4xS11WBtmCW66mzVkC4CnM1074jvLNHGDTbiU36G+S0K+Mq9i+G+zHw27Q1zh+I
CLBE0YpIjbCGa6CSbb5HyimMEjZgvH9qp9hyF/ouW5le70BJPldgQwZjQ6gdDZiG
n1fDi9lmP0o5PxpcN4T8WbHVyzGndDbBANssEDD0cwMxwFDQzSYUoCOT7uRW+oTP
EwhxqN1A6Esf0S8I73+vu1XYH8ajRVe7dh1AddO+DLVk+rKs2BYSYtpY+f/TswzQ
P44Igt4J/UCbLyd0IoxANEyLW0Dj3cxO0Jah/Q7oMlYiFEZ8P3w/Jp7osIDvIi3h
TZC/2ea6KKpWPqY5Q7RSsd2YO+p3mc4PCH4/+j1VMsbQDyGmeZ5rAn2g0Bv4l/k5
HeBsYWTvqzzmbht3SdzG/5MfgMXI90NvExpErI+ceAxV8UxHpfT8RECpnKEqZzo5
wd5+qSL4ACtD0xi+WGOrFcbSUotAyYc4IE1t/q2gwD/w/LxD4Hc=
=QApe
-----END PGP SIGNATURE-----

--=-mc28AfLEfVUZO+gxaMFp--