CVE-2024-40929: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: check nssids before accessing the ssids
In some versions of cfg80211, the ssids poinet might be a valid one even though nssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking nssids first.
Other sources
Linux Kernel is vulnerable to a denial of service, caused by an out-of-bound access in iwlwifi/mvm/scan.c. A local authenticated attacker could exploit this vulnerability to cause a denial of service.
— IBM
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40929?
CVE-2024-40929 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-40929?
To remediate CVE-2024-40929, upgrade the kernel to a version that includes the fix, such as kernel 5.10.221, 5.15.162, or later versions.
Which versions of the Linux kernel are affected by CVE-2024-40929?
CVE-2024-40929 affects specific versions of the Linux kernel before 5.10.221, 5.15.162, 6.1.95, and others listed in the advisory.
Does CVE-2024-40929 affect Red Hat or Debian distributions?
Yes, CVE-2024-40929 impacts both Red Hat and Debian distributions that include affected kernel versions.
What is the nature of the vulnerability in CVE-2024-40929?
CVE-2024-40929 involves an out-of-bounds access when accessing the ssids pointer without checking the n_ssids value in certain versions of cfg80211.