PT-2024-29246
CVE-2024-41072
·
تاريخ النشر
2024-05-31
·
تاريخ التحديث
2026-10-19
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.43
Description
A vulnerability in the Linux kernel has been resolved. The issue is related to the wifi functionality, specifically in the
cfg80211 wext siwscan() function, where an extra check has been added to ensure that the number of channels passed via ioctl(sock, SIOCSIWSCAN, ...) does not exceed IW MAX FREQUENCIES. If the number of channels exceeds this limit, the request is rejected with -EINVAL.Recommendations
Update to Linux kernel version 6.6.43 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
cfg80211 wext siwscan() function until a patch is available. Avoid using the ioctl(sock, SIOCSIWSCAN, ...) call with a large number of channels until the issue is resolved.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾