Bug 2327349 (CVE-2024-53055) - CVE-2024-53055 kernel: wifi: iwlwifi: mvm: fix 6 GHz scan construction
Summary: CVE-2024-53055 kernel: wifi: iwlwifi: mvm: fix 6 GHz scan construction
Keywords:
Status: NEW
Alias: CVE-2024-53055
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327473
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 18:02 UTC by OSIDB Bzimport
Modified: 2026-02-06 04:07 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:6966 0 None None None 2025-05-13 08:35:54 UTC

Description OSIDB Bzimport 2024-11-19 18:02:22 UTC
In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: fix 6 GHz scan construction

If more than 255 colocated APs exist for the set of all
APs found during 2.4/5 GHz scanning, then the 6 GHz scan
construction will loop forever since the loop variable
has type u8, which can never reach the number found when
that's bigger than 255, and is stored in a u32 variable.
Also move it into the loops to have a smaller scope.

Using a u32 there is fine, we limit the number of APs in
the scan list and each has a limit on the number of RNR
entries due to the frame size. With a limit of 1000 scan
results, a frame size upper bound of 4096 (really it's
more like ~2300) and a TBTT entry size of at least 11,
we get an upper bound for the number of ~372k, well in
the bounds of a u32.

Comment 2 errata-xmlrpc 2025-05-13 08:35:53 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:6966 https://access.redhat.com/errata/RHSA-2025:6966

Comment 3 harryy 2026-02-06 04:07:26 UTC
Right from the first glance, this feels like a team that genuinely cares about solid, lasting work. The way services are explained makes it easy for homeowners to understand what they are getting without any confusion. Browsing through http://concretecontractorslakehavasu.com/ in the middle of planning a project actually feels helpful and reassuring. It is clear there is real experience behind the words, and that builds trust quickly. Definitely worth checking out if quality matters.


Note You need to log in before you can comment on or make changes to this bug.