Commit Graph

21 Commits

Author SHA1 Message Date
Alexandre Bard 6e7a56fe26 Merge branch master into kirkstone
As part of upgrading NRSW to kirkstone. The kirkstone branch was already
created for OEM-linux but needed to be updated with latest changes from
master.

id:409447
2023-07-18 12:07:33 +02:00
Patrick Walther adb94d90b6 FIX: [mac80211] CVE-2022-47522 fixes
BugzId: 82740
2023-04-06 16:57:53 +02:00
Patrick Walther 303cf4aa33 FIX: [mac80211] backport security fixes
This mainly affects scanning and beacon parsing, especially with
MBSSID enabled

Fixes: CVE-2022-41674
Fixes: CVE-2022-42719
Fixes: CVE-2022-42720
Fixes: CVE-2022-42721
Fixes: CVE-2022-42722

patches taken from
26f400210d

BugzId: 81746
2022-10-18 11:50:35 +02:00
Patrick Walther c8db6d9e9d FIX: [mac80211] fix openwrt subsys patch for kernel 5.10
BugzId: 78943
2022-09-22 14:29:37 +02:00
Patrick Walther de05b7fbd8 FIX: [mac80211] update to version 5.15.58
BugzId: 78943
2022-09-16 15:52:13 +02:00
Marc Mattmueller e454032d10 general: made layer kirkstone compatible
with the yocto update from dunfell to kirkstone (the new LTS
version) several things needed to be changed.

Signed-off-by: Marc Mattmueller <marc.mattmueller@netmodule.com>
2022-07-20 11:18:49 +02:00
Patrick Walther 1452f94997 FIX: [mac80211] mark also adjacent channels (like 144) as SRD
if it is a short range device channel

BugzId: 75271
2021-10-20 16:19:49 +02:00
Patrick Walther 5c9f467797 FIX: [mac80211] show SRD channels correctly
BugzId: 75271
2021-10-14 19:34:35 +02:00
Patrick Walther f25f37d343 FIX: [mac80211] recognize ant gain also for chipsets without chanctx (ath9k)
FIX: [mac80211] do not try to get the max allowed output power if antgain was set

BugzId: 75261
BugzId: 72714
2021-10-14 19:02:52 +02:00
Patrick Walther 6bf77c5803 FIX: [mac80211] CVE-2020-3702 ath9k patches
[1/5] ath: Use safer key clearing with key cache entries
[2/5] ath9k: Clear key cache explicitly on disabling hardware
[3/5] ath: Export ath_hw_keysetmac()
[4/5] ath: Modify ath_key_delete() to not need full key entry
[5/5] ath9k: Postpone key cache entry deletion for TXQ frames reference it

BugzId: 74370
2021-08-19 18:16:37 +02:00
Patrick Walther 1d970d96ba CHG: [mac80211] rename meta package name
BugzId: 74268
2021-08-12 20:59:36 +02:00
Patrick Walther e437eaade3 FIX: [mac80211] move tpc client parameter to NRSW
BugzId: 72830
2021-05-19 16:43:27 +02:00
Patrick Walther e67d63f8a4 FIX: [mac80211] recalc txpower depending on antenna gain
Remark:
This piece of code was missing within the last driver update

BugzId: 72714
2021-05-17 16:31:47 +02:00
Patrick Walther dc032ec273 FIX: [wext] do not show INT_MIN as txpower value if nothing was configured
BugzId: 72713
2021-05-17 16:13:34 +02:00
Patrick Walther 4fb2e1d93b FIX: [mac80211] assure all fragments are encrypted (CVE-2020-26147)
FIX: [mac80211] prevent mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587)
FIX: [mac80211] properly handle A-MSDUs that start with an RFC 1042 header
FIX: [mac80211] Mitigate A-MSDU injection attacks (CVE-2020-24588)
FIX: [mac80211] drop A-MSDUs completely with old ciphers. (CVE-2020-24588)
FIX: [mac80211] add fragment cache to sta_info
FIX: [mac80211] check defrag PN against current frame
FIX: [mac80211] prevent attacks on TKIP/WEP as well
FIX: [mac80211] do not accept/forward invalid EAPOL frames
FIX: [mac80211] extend protection against mixed key and fragment cache attacks (CVE-2020-24586, CVE-2020-24587)
FIX: [mac80211] ath10k: add CCMP PN replay protection for fragmented frames for PCIe
FIX: [mac80211] ath10k: drop fragments with multicast DA for PCIe (CVE-2020-26145)
FIX: [mac80211] ath10k: drop fragments with multicast DA for SDIO (CVE-2020-26145)
FIX: [mac80211] ath10k: drop MPDU which has discard flag set by firmware for SDIO (CVE-2020-24588)
FIX: [mac80211] ath10k: Fix TKIP Michael MIC verification for PCIe (CVE-2020-26141)
FIX: [mac80211] ath10k: Validate first subframe of A-MSDU before processing the list
FIX: [mac80211] ath11k: Clear the fragment cache during key install (CVE-2020-24587)
FIX: [mac80211] ath11k: Drop multicast fragments
FIX: [wl18xx] firmware: updated to version 8.9.0.0.88 (Fixes related to Wi-Fi FragAttacks - FRagmentation and AGgregation Attacks)

BugzId: 72727
2021-05-12 19:50:20 +02:00
Patrick Walther a062a33db5 FIX: [mac80211] update to version v5.10.16-1
BugzId: 67915
2021-03-26 19:55:35 +01:00
Patrick Walther c42a7fc5f5 FIX: [mac80211] wlcore: adding support to IGTK key - AES-CMAC128 2021-01-13 17:43:47 +01:00
Patrick Walther deacc7ab8d FIX; [mac80211] enable DFS certified flag for ath10k
BugzId: 65975
2020-11-23 19:21:16 +01:00
Patrick Walther 2099333386 FIX: [mac80211] activate no TPC client for netbolt
BugzId: 65975
2020-11-23 18:24:39 +01:00
Patrick Walther 3de6fe9e8c CHG: [mac80211] move mac80211 config files to meta-netmodule-wlan
BugzId: 67854
2020-11-04 18:53:51 +01:00
Patrick Walther 2b60e6e95c ADD: [meta] add mac80211 to meta layer
BugzId: 65179
2020-07-24 19:20:01 +02:00