CVE-2024-40929

Updated: 2024-08-28 14:37:25.222075

Description:

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x NONE 0
CVSS Version 3.x MEDIUM 4.4

Status

OS name Project name Version Score Severity Status Errata Last updated
AlmaLinux 9.2 ESU kernel 5.14.0 4.4 MEDIUM Released CLSA-2024:1728936982 2024-10-14 17:37:43
AlmaLinux 9.2 FIPS kernel 5.14.0 4.4 MEDIUM In Testing 2024-10-14 05:33:36
CentOS 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-29 05:23:23
CentOS 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-29 05:23:22
CentOS 8.4 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727690947 2024-09-30 10:52:47
CentOS 8.5 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727690025 2024-09-30 10:52:48
CentOS Stream 8 ELS kernel 4.18.0 4.4 MEDIUM Released CLSA-2024:1727815919 2024-10-01 17:35:30
CloudLinux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-29 05:23:23
CloudLinux 7 ELS kernel 3.10.0 4.4 MEDIUM Ignored 2024-08-29 05:23:22
Oracle Linux 6 ELS kernel 2.6.32 4.4 MEDIUM Ignored 2024-08-29 05:23:22