2297513 – (CVE-2024-40929) CVE-2024-40929 kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

Bug 2297513 (CVE-2024-40929) - CVE-2024-40929 kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

Summary: CVE-2024-40929 kernel: wifi: iwlwifi: mvm: check n_ssids before accessing the...

Keywords:
Status:	NEW
Alias:	CVE-2024-40929
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2024-07-12 13:34 UTC by OSIDB Bzimport
Modified:	2024-10-21 09:47 UTC (History)
CC List:	4 users (show)
Fixed In Version:	kernel 5.10.221, kernel 5.15.162, kernel 6.1.95, kernel 6.6.35, kernel 6.9.6, kernel 6.10-rc3
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHBA-2024:6299	None	None	None	2024-09-04 08:15:12 UTC
Red Hat Product Errata	RHBA-2024:7043	None	None	None	2024-09-24 09:43:05 UTC
Red Hat Product Errata	RHBA-2024:7198	None	None	None	2024-09-26 09:50:45 UTC
Red Hat Product Errata	RHBA-2024:7236	None	None	None	2024-09-26 14:33:17 UTC
Red Hat Product Errata	RHBA-2024:7637	None	None	None	2024-10-03 14:45:52 UTC
Red Hat Product Errata	RHBA-2024:8227	None	None	None	2024-10-17 06:45:55 UTC
Red Hat Product Errata	RHSA-2024:5928	None	None	None	2024-08-28 12:21:03 UTC
Red Hat Product Errata	RHSA-2024:7000	None	None	None	2024-09-24 02:34:24 UTC
Red Hat Product Errata	RHSA-2024:7001	None	None	None	2024-09-24 00:39:07 UTC

Description OSIDB Bzimport 2024-07-12 13:34:21 UTC

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

In some versions of cfg80211, the ssids poinet might be a valid one even
though n_ssids is 0. Accessing the pointer in this case will cuase an
out-of-bound access. Fix this by checking n_ssids first.

Comment 12 errata-xmlrpc 2024-08-28 12:21:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:5928 https://access.redhat.com/errata/RHSA-2024:5928

Comment 13 errata-xmlrpc 2024-09-24 00:39:06 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:7001 https://access.redhat.com/errata/RHSA-2024:7001

Comment 14 errata-xmlrpc 2024-09-24 02:34:23 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:7000 https://access.redhat.com/errata/RHSA-2024:7000

Note You need to log in before you can comment on or make changes to this bug.