Sterownik WLAN dla jądra Linux 3.x i 4.x vulnerabilities

The WLAN driver for Linux kernel 3.x and 4.x does not verify authorization for private SET IOCTL calls, allowing attackers to gain privileges via a crafted application.

CVE-2015-0570 involves a stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN driver for Linux kernel 3.x and 4.x. This allows attackers to gain privileges via a crafted application that uses a long WPS IE element.

CVE-2015-0569 involves a heap-based buffer overflow in the WLAN driver for Linux kernel 3.x and 4.x, allowing attackers to gain privileges via a crafted application that establishes a packet filter.