4 ms·

is this really that bad of a bug though? i need to be using that driver, and someone near me has to be actively knowing and trying to inject... and it's a DoS ?

• nousermane 4y ago
  Driver in question is cfg80211. Majority of popular wireless cards use it. DoS is the only publicly known exploit, right now. There is understanding that RCE is possible with additional specialist work. Local packet injection is an implementation detail of the first public PoC. There are other implementations of the same exploit, that deliver packets over the air instead. Including one that runs on ESP32, and attacks unmodified Linux nearby: https://github.com/jo-m/linux-wifi-ota-crash https://github.com/jo-m/linux-wifi-ota-crash
• rbanffy 4y ago
  > and someone near me has to be actively knowing and trying to inject Just leave a small board, a battery, and a solar panel on a roof or tree near your office. If RCE is possible with this (people think it is), this would be very valuable. On a tree near my office, you'd gain access to our network, Microsoft's and a European central bank. Not bad at all.