CVE-2013-4579
NoneCVSS
—
EPSS
10.2%
Published
Nov 20, 2013
CISA due date
—
The record
The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | 3.12.8-1 |
| Debian:12 | linux | 0 | 3.12.8-1 |
| Debian:13 | linux | 0 | 3.12.8-1 |
| Mageia:3 | fglrx | 0 | 13.251-1.mga3.nonfree |
| Mageia:3 | kernel | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-linus | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-rt | 0 | 3.10.28-0.rt25.1.mga3 |
| Mageia:3 | kernel-tmb | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-userspace-headers | 0 | 3.10.28-1.mga3 |
| Mageia:3 | kernel-vserver | 0 | 3.10.28-0.vs2.3.6.8.1.mga3 |
| Mageia:3 | kmod-broadcom-wl | 0 | 6.30.223.141-10.mga3.nonfree |
| Mageia:3 | kmod-fglrx | 0 | 13.251-3.mga3.nonfree |
| Mageia:3 | kmod-nvidia-current | 0 | 319.60-11.mga3.nonfree |
| Mageia:3 | kmod-nvidia173 | 0 | 173.14.38-27.mga3.nonfree |
| Mageia:3 | kmod-nvidia304 | 0 | 304.108-12.mga3.nonfree |
| Mageia:3 | kmod-vboxadditions | 0 | 4.2.16-7.mga3 |
| Mageia:3 | kmod-virtualbox | 0 | 4.2.16-7.mga3 |
| Mageia:3 | kmod-xtables-addons | 0 | 2.3-11.mga3 |
| Mageia:4 | kernel-vserver | 0 | 3.10.28-0.vs2.3.6.8.1.mga4 |
| Ubuntu:14.04:LTS | linux | 0 | 3.13.0-1.16 |
| Ubuntu:14.04:LTS | linux-aws | 0 | 4.4.0-1002.2 |
| Ubuntu:14.04:LTS | linux-lts-utopic | 0 | 3.16.0-25.33~14.04.2 |
| Ubuntu:14.04:LTS | linux-lts-vivid | 0 | 3.19.0-18.18~14.04.1 |
| Ubuntu:14.04:LTS | linux-lts-wily | 0 | 4.2.0-18.22~14.04.1 |
| Ubuntu:14.04:LTS | linux-lts-xenial | 0 | 4.4.0-13.29~14.04.1 |
| Ubuntu:16.04:LTS | linux | 0 | 4.2.0-16.19 |
| Ubuntu:16.04:LTS | linux-aws | 0 | 4.4.0-1001.10 |
| Ubuntu:16.04:LTS | linux-gke | 0 | 4.4.0-1003.3 |
| Ubuntu:16.04:LTS | linux-hwe | 0 | 4.8.0-36.36~16.04.1 |
| Ubuntu:16.04:LTS | linux-raspi2 | 0 | 4.2.0-1013.19 |
| Ubuntu:16.04:LTS | linux-snapdragon | 0 | 4.4.0-1012.12 |
| Ubuntu:Pro:14.04:LTS | linux-flo | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | linux-goldfish | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | linux-mako | 0 | No fix |
| Ubuntu:Pro:14.04:LTS | linux-manta | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | linux-flo | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | linux-goldfish | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | linux-mako | 0 | No fix |
Related vulnerabilities
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21760 In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU… Also affects linux
- CVE-2025-21758 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU… Also affects linux
- CVE-2025-21664 In the Linux kernel, the following vulnerability has been resolved: dm thin: make… Also affects linux
- CVE-2024-57946 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't… Also affects linux
- CVE-2024-57945 In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the… Also affects linux