In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on (re)connect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP connection request and access the freed or already reused memory. Additionally optimize cfg80211_sme_connect() and avoid an useless schedule of conn_work.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | 12.2(5c) |
| Linux | Linux | 12.2(5d) |
| Linux | Linux | n/a |
| Linux | Linux | 750-852 firmware version 10 and prior |