CVE-2024-41072 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211_wext_siwscan()', add extra check whether number of channels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed IW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f
https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b
https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b
https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc
https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b
https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79
https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac
https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95
https://lore.kernel.org/linux-cve-announce/2024072909-CVE-2024-41072-86de@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-41072
https://www.cve.org/CVERecord?id=CVE-2024-41072

History

Wed, 11 Sep 2024 18:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Sep 2024 13:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 19 Aug 2024 22:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-99
Metrics	threat_severity `Moderate`	threat_severity `Low`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T14:57:32.432Z

Updated: 2024-11-05T09:36:10.622Z

Reserved: 2024-07-12T12:17:45.631Z

Link: CVE-2024-41072

Vulnrichment

Updated: 2024-08-02T04:46:52.210Z

NVD

Status : Awaiting Analysis

Published: 2024-07-29T15:15:14.937

Modified: 2024-07-29T16:21:52.517

Link: CVE-2024-41072

Redhat

Severity : Low

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41072 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-41072", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-07-12T12:17:45.631Z", "datePublished": "2024-07-29T14:57:32.432Z", "dateUpdated": "2024-11-05T09:36:10.622Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-05T09:36:10.622Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: wext: add extra SIOCSIWSCAN data check\n\nIn 'cfg80211_wext_siwscan()', add extra check whether number of\nchannels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed\nIW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/scan.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "b02ba9a0b55b", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "de5fcf757e33", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "6295bad58f98", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "a43cc0558530", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "001120ff0c9e", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "fe9644efd867", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "35cee10ccaee", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "6ef09cdc5ba0", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/wireless/scan.c"], "versions": [{"version": "4.19.319", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.281", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.223", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.164", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.101", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.42", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9.11", "lessThanOrEqual": "6.9.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.10", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79"}, {"url": "https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac"}, {"url": "https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b"}, {"url": "https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b"}, {"url": "https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f"}, {"url": "https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95"}, {"url": "https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b"}, {"url": "https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc"}], "title": "wifi: cfg80211: wext: add extra SIOCSIWSCAN data check", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:46:52.210Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41072", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:21:33.807600Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T17:34:00.660Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:46:52.210Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-41072", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-09-10T16:21:33.807600Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-11T12:42:20.150Z"}}], "cna": {"title": "wifi: cfg80211: wext: add extra SIOCSIWSCAN data check", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "b02ba9a0b55b", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "de5fcf757e33", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "6295bad58f98", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "a43cc0558530", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "001120ff0c9e", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "fe9644efd867", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "35cee10ccaee", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "6ef09cdc5ba0", "versionType": "git"}], "programFiles": ["net/wireless/scan.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "4.19.319", "versionType": "custom", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.281", "versionType": "custom", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.223", "versionType": "custom", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.164", "versionType": "custom", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.101", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.42", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.9.11", "versionType": "custom", "lessThanOrEqual": "6.9.*"}, {"status": "unaffected", "version": "6.10", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/wireless/scan.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79"}, {"url": "https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac"}, {"url": "https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b"}, {"url": "https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b"}, {"url": "https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f"}, {"url": "https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95"}, {"url": "https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b"}, {"url": "https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc"}], "x_generator": {"engine": "bippy-c9c4e1df01b2"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: wext: add extra SIOCSIWSCAN data check\n\nIn 'cfg80211_wext_siwscan()', add extra check whether number of\nchannels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed\nIW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-07-29T14:57:32.432Z"}}}, "cveMetadata": {"cveId": "CVE-2024-41072", "state": "PUBLISHED", "dateUpdated": "2024-09-11T17:34:00.660Z", "dateReserved": "2024-07-12T12:17:45.631Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-07-29T14:57:32.432Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}