CVE-2024-40911

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a NULL pointer dereference in the Linux kernel's cfg80211 component. This occurs when the sta set sinfo() function is called before the ath10k sta state() function has finished resetting arsta data, resulting in a kernel NULL pointer dereference. The vulnerability can be exploited to cause a denial of service. Locking the wiphy before calling rdev get station() prevents this issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.