Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#1

Post by meltingice » Wed, May 13, 2015, 8:18 PM UTC

Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver
lkml.org

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#2

Post by zx2c4 » Wed, May 13, 2015, 8:23 PM UTC

Related oss-sec discussion for CVE assignment:

http://seclists.org/oss-sec/2015/q2/446

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#3

Post by cjbprime » Wed, May 13, 2015, 8:23 PM UTC

It's a "staging" driver; not a big deal, you are almost certainly not using this driver.

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#4

Post by zx2c4 » Wed, May 13, 2015, 8:24 PM UTC

cjbprime wrote: post #3

It's a "staging" driver; not a big deal, you are almost certainly not using this driver.

I wouldn't jump to such conclusions so fast about the deployment and usage of this driver. Included with many distributions and several devices require its usage.

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#5

Post by cjbprime » Wed, May 13, 2015, 8:59 PM UTC

zx2c4 wrote: post #4

cjbprime wrote: post #3

It's a "staging" driver; not a big deal, you are almost certainly not using this driver.

I wouldn't jump to such conclusions so fast about the deployment and usage of this driver. Included with many distributions and several devices require its usage.

It doesn't look to be enabled in Fedora, Debian, Ubuntu, Mint or OpenSuSE to me, which covers the top five. Which distributions are you referring to?

I see OpenSUSE disabled it back in 2013 with a commit message '"Take it behind the barn and shoot it." says Michal. :)', presumably in response to inspection after its previous vulnerabilities -- http://kernel.opensuse.org/cgit/kernel-source/commit/?id=2c1...

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#6

Post by tedchs » Wed, May 13, 2015, 9:08 PM UTC

Alarmist headline for an obscure driver, that, while included in the kernel, is almost certainly not running on your production Linux server. Seems to be related to products from Ozmo Device Inc. that push USB data over a layer 2 Wi-Fi Direct connection: http://lxr.free-electrons.com/source/drivers/staging/ozwpan/

Re: Four Remote Packet-Of-Death Vulnerabilities Found in Linux Driver

#7

Post by duskwuff » Thu, May 14, 2015, 5:53 AM UTC

tedchs wrote: post #6

Alarmist headline for an obscure driver, that, while included in the kernel, is almost certainly not running on your production Linux server. Seems to be related to products from Ozmo Device Inc. that push USB data over a layer 2 Wi-Fi Direct connection: http://lxr.free-electrons.com/source/drivers/staging/ozwpan/

From a company that doesn't even appear to be in business anymore:

http://www.ozmodevices.com/