]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
net80211: fail for unicast traffic without unicast key
authordomienschepers <schepers.d@northeastern.edu>
Thu, 10 Nov 2022 00:00:00 +0000 (00:00 +0000)
committerGordon Tetlow <gordon@FreeBSD.org>
Wed, 6 Sep 2023 17:13:25 +0000 (10:13 -0700)
commit7f34ee7cc56b84cf880a5e91cf8b1011f41f1cab
tree04b9d0aae57ea5e008e1b75dc03a9d2f12608f80
parent41b7760991efda33f696c45d9eeaefd8bc63a847
net80211: fail for unicast traffic without unicast key

Falling back to the multicast key may cause unicast traffic to leak.
Instead fail when no key is found.

For more information see the 'Framing Frames: Bypassing Wi-Fi Encryption
by Manipulating Transmit Queues' paper.

Approved by: so
Security: FreeBSD-SA-23:11.wifi
Security: CVE-2022-47522

(cherry picked from commit 61605e0ae5d8f34b89b8e71e393f3006f511e86a)
(cherry picked from commit 6c9bcecfb296b96a383012e02bc9582260588339)
sys/net80211/ieee80211_crypto.c