CVE-2024-43912

wifi: nl80211: disallow setting special AP channel widths

EPSS 0.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Aug 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: disallow setting special AP channel widths Setting the AP channel width is meant for use with the normal 20/40/... MHz channel width progression, and switching around in S1G or narrow channels isn't supported. Disallow that.

Affected products

Linux · Linux

References

https://git.kernel.org/stable/c/23daf1b4c91db9b26f8425cc7039cf96d22ccbfe https://git.kernel.org/stable/c/3d42f2125f6c89e1e71c87b9f23412afddbba45e https://git.kernel.org/stable/c/ac3bf6e47fd8da9bfe8027e1acfe0282a91584fc https://git.kernel.org/stable/c/c6ea738e3feb407a3283197d9a25d0788f4f3cee https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html