CVE-2024-43841

LOW

Linux Kernel - Incorrect SSID Validation in virt_wifi Connection Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: avoid reporting connection success with wrong SSID When user issues a connection with a different SSID than the one virt_wifi has advertised, the __cfg80211_connect_result() will trigger the warning: WARN_ON(bss_not_found). The issue is because the connection code in virt_wifi does not check the SSID from user space (it only checks the BSSID), and virt_wifi will call cfg80211_connect_result() with WLAN_STATUS_SUCCESS even if the SSID is different from the one virt_wifi has advertised. Eventually cfg80211 won't be able to find the cfg80211_bss and generate the warning. Fixed it by checking the SSID (from user space) in the connection code.

Scores

CVSS v3 3.3
EPSS 0.0021
EPSS Percentile 11.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (23)
linux/Kernel 5.0.0 - 5.4.282linux
linux/Kernel 5.11.0 - 5.15.165linux
linux/Kernel 5.16.0 - 6.1.103linux
linux/Kernel 5.5.0 - 5.10.224linux
linux/Kernel 6.2.0 - 6.6.44linux
linux/Kernel 6.7.0 - 6.10.3linux
Linux/Linux < 5.0
Linux/Linux 5.0
Linux/Linux 5.10.224 - 5.10.*
Linux/Linux 5.15.165 - 5.15.*
... and 13 more
Published Aug 17, 2024
Tracked Since Feb 18, 2026