CVE-2009-2844

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 2.6.31-rc6

Description The issue allows remote attackers to cause a denial of service (crash) via a sequence of beacon frames. This is achieved by sending one frame that omits an SSID Information Element (IE) and a subsequent frame that contains an SSID IE, which triggers a NULL pointer dereference in the cmp ies function.

Recommendations For Linux kernel versions prior to 2.6.31-rc6, update to version 2.6.31-rc6 or later to resolve the issue.