d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
ffc19cf52d
freebsd-dev/sys
History
Mathy Vanhoef ffc19cf52d net80211: prevent plaintext injection by A-MSDU RFC1042/EAPOL frames 
No longer accept plaintext A-MSDU frames that start with an RFC1042
header with EtherType EAPOL.  This is done by only accepting EAPOL
packets that are included in non-aggregated 802.11 frames.

Note that before this patch, FreeBSD also only accepted EAPOL frames
that are sent in a non-aggregated 802.11 frame due to bugs in
processing EAPOL packets inside A-MSDUs. In other words,
compatibility with legitimate devices remains the same.

This relates to section 6.5 in the 2021 Usenix "FragAttacks" (Fragment
and Forge: Breaking Wi-Fi Through Frame Aggregation and Fragmentation)
paper.

Submitted by:	Mathy Vanhoef (Mathy.Vanhoef kuleuven.be)
Security:	CVE-2020-26144
PR:		256120
MFC after:	7 days
Differential Revision: https://reviews.freebsd.org/D30665
2021-09-30 14:54:04 +00:00
..
amd64 minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
arm minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
arm64 minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
bsm Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9). 2021-08-05 23:20:42 +08:00
cam cam: Avoiding waking up doneq threads if we're dumping 2021-09-25 10:15:03 -04:00
cddl kern: drop remaining references to removed makesyscalls.sh 2021-09-09 19:40:54 -05:00
compat linprocfs: find cwd and root handling 2021-09-30 12:59:58 +02:00
conf bluetooth: complete removal of ng_h4 2021-09-29 20:00:02 -06:00
contrib ipfilter: Save time and cycles swapping bucket table sizes 2021-09-29 17:44:02 -07:00
crypto crypto(4): Fix a few typos in camellia.c 2021-09-04 13:02:11 +02:00
ddb Create sys/reg.h for the common code previously in machine/reg.h 2021-08-30 12:50:53 +01:00
dev libpmc: fix the 'cycles' event alias on x86 2021-09-30 11:15:26 -03:00
dts Remove "All Rights Reserved" from FreeBSD Foundation sys/ copyrights 2021-08-08 10:42:24 -04:00
fs fusefs: implement FUSE_NO_OPEN_SUPPORT and FUSE_NO_OPENDIR_SUPPORT 2021-09-26 21:57:29 -06:00
gdb
geom Fix memory deadlock when GELI partition is used for swap. 2021-09-28 11:23:52 -07:00
gnu
i386 minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
isa
kern fd: add pwd_hold_proc 2021-09-30 12:49:51 +02:00
kgssapi
libkern libkern: remove bcopy 2021-08-24 11:24:07 +00:00
mips minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
modules modules: iichid: needs opt_acpi.h 2021-09-29 23:10:35 -05:00
net pfctl: userspace adaptive syncookies configration 2021-09-29 15:11:54 +02:00
net80211 net80211: prevent plaintext injection by A-MSDU RFC1042/EAPOL frames 2021-09-30 14:54:04 +00:00
netgraph bluetooth: complete removal of ng_h4 2021-09-29 20:00:02 -06:00
netinet sctp: provide a specific stream scheduler function for FCFS 2021-09-29 02:08:37 +02:00
netinet6 sctp: Tighten up locking around sctp_aloc_assoc() 2021-09-11 10:15:21 -04:00
netipsec ipsec: fix typo part2 2021-09-27 07:46:56 +02:00
netpfil pf: hook up adaptive mode configuration 2021-09-29 15:11:54 +02:00
netsmb
nfs
nfsclient
nfsserver
nlm
ofed socket: De-duplicate SBLOCKWAIT() definitions 2021-09-14 09:01:32 -04:00
opencrypto opencrypto: Disallow requests which pass VERIFY_DIGEST without a MAC 2021-09-24 15:04:45 -04:00
powerpc minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
riscv minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
rpc rpc: Convert an SOLISTENING check to an assertion 2021-09-17 14:19:05 -04:00
security Add fspacectl(2), vn_deallocate(9) and VOP_DEALLOCATE(9). 2021-08-05 23:20:42 +08:00
sys fd: add pwd_hold_proc 2021-09-30 12:49:51 +02:00
teken
tests routing: add IPv6 fib validation procedure. 2021-08-16 23:04:01 +00:00
tools makesyscalls: sprinkle some assert() on standard function calls 2021-09-24 20:55:56 -05:00
ufs Avoid "consumer not attached in g_io_request" panic when disk lost 2021-09-27 20:04:51 -07:00
vm minidump: De-duplicate is_dumpable() 2021-09-29 16:41:52 -03:00
x86 minidump: De-duplicate the progress bar 2021-09-29 16:42:21 -03:00
xdr
xen xen: introduce xen_pv_disks_disabled() 2021-07-28 17:27:04 +02:00
Makefile