CVE-2024-41072

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-41072
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211_wext_siwscan()', add extra check whether number of channels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed IW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f Patch
https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b Patch
https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b Patch
https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc Patch
https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b Patch
https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 Patch
https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac Patch
https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 Patch
https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f Patch
https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b Patch
https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b Patch
https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc Patch
https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b Patch
https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 Patch
https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac Patch
https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
History

09 Oct 2025, 18:04

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.10:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f - () https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f - Patch
References () https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b - () https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b - Patch
References () https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b - () https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b - Patch
References () https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc - () https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc - Patch
References () https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b - () https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b - Patch
References () https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 - () https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 - Patch
References () https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac - () https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac - Patch
References () https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 - () https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo

21 Nov 2024, 09:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f - () https://git.kernel.org/stable/c/001120ff0c9e3557dee9b5ee0d358e0fc189996f -
References () https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b - () https://git.kernel.org/stable/c/35cee10ccaee5bd451a480521bbc25dc9f07fa5b -
References () https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b - () https://git.kernel.org/stable/c/6295bad58f988eaafcf0e6f8b198a580398acb3b -
References () https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc - () https://git.kernel.org/stable/c/6ef09cdc5ba0f93826c09d810c141a8d103a80fc -
References () https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b - () https://git.kernel.org/stable/c/a43cc0558530b6c065976b6b9246f512f8d3593b -
References () https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 - () https://git.kernel.org/stable/c/b02ba9a0b55b762bd04743a22f3d9f9645005e79 -
References () https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac - () https://git.kernel.org/stable/c/de5fcf757e33596eed32de170ce5a93fa44dd2ac -
References () https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 - () https://git.kernel.org/stable/c/fe9644efd86704afe50e56b64b609de340ab7c95 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: cfg80211: wext: agregue verificación de datos SIOCSIWSCAN adicional En 'cfg80211_wext_siwscan()', agregue verificación adicional si el número de canales pasados a través de 'ioctl(sock, SIOCSIWSCAN, ...) ' no excede IW_MAX_FREQUENCIES y rechaza la solicitud no válida con -EINVAL en caso contrario.

29 Jul 2024, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-29 15:15

Updated : 2025-10-09 18:04

NVD link : CVE-2024-41072

Mitre link : CVE-2024-41072

CVE.ORG link : CVE-2024-41072

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo