CVE-2024-35937: wifi: cfg80211: check A-MSDU format more carefully
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: check A-MSDU format more carefully
If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more careful and check if the subframe header can even be present.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: check A-MSDU format more carefully
The Linux kernel CVE team has assigned CVE-2024-35937 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051918-CVE-2024-35937-0415@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-35937?
CVE-2024-35937 has been classified with medium severity due to potential data out-of-bounds access.
How do I fix CVE-2024-35937?
To remediate CVE-2024-35937, update the kernel to versions 6.6.27 or above for Red Hat systems, or apply the appropriate updates for Debian as specified.
What software is affected by CVE-2024-35937?
CVE-2024-35937 affects multiple kernel versions in both Red Hat and Debian distributions.
What type of vulnerability is CVE-2024-35937?
CVE-2024-35937 is a vulnerability related to the processing of A-MSDU subframes in the Linux kernel.
Is there a patch available for CVE-2024-35937?
Yes, patches are available through system updates for the affected kernel versions.