CVE-2015-0571
HighSummary
The WLAN driver for Linux kernel 3.x and 4.x does not verify authorization for private SET IOCTL calls, allowing attackers to gain privileges via a crafted application.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes security patches addressing this vulnerability.
Other vulnerabilities in Sterownik WLAN dla jądra Linux 3.x i 4.x
See all- CVE-2015-0570High
CVE-2015-0570 involves a stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN driver for Linux kernel 3.x and 4.x. This allows attackers to gain privileges via a crafted application that uses a long WPS IE element.
- CVE-2015-0569High
CVE-2015-0569 involves a heap-based buffer overflow in the WLAN driver for Linux kernel 3.x and 4.x, allowing attackers to gain privileges via a crafted application that establishes a packet filter.
Original NVD description (English source)
The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not verify authorization for private SET IOCTL calls, which allows attackers to gain privileges via a crafted application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.