]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
net80211: fail for unicast traffic without unicast key
authordomienschepers <schepers.d@northeastern.edu>
Thu, 10 Nov 2022 00:00:00 +0000 (00:00 +0000)
committerBjoern A. Zeeb <bz@FreeBSD.org>
Mon, 10 Apr 2023 23:38:57 +0000 (23:38 +0000)
commit61605e0ae5d8f34b89b8e71e393f3006f511e86a
tree28d8d7116aa2f1e0fa1a9bb4b7bc170f5c258a64
parent461ccb55d50ccf1b5bcfe1310fe32d72f8b0ecdd
net80211: fail for unicast traffic without unicast key

Falling back to the multicast key may cause unicast traffic to leak.
Instead fail when no key is found.

For more information see the 'Framing Frames: Bypassing Wi-Fi Encryption
by Manipulating Transmit Queues' paper.

[ I updated the commit message to reference the paper and the code
comment to record historic behaviour as discussed in private email. ]

Security: CVE-2022-47522
sys/net80211/ieee80211_crypto.c