CVE-2024-47738

LOW

Linux Kernel 5.10.51-5.11 - Denial of Service via Incorrect Rate Mask Handling in mac80211

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 ("wifi: mac80211: don't use rate mask for scanning"), ignore incorrect settings to avoid no supported rate warning reported by syzbot. The syzbot did bisect and found cause is commit 9df66d5b9f45 ("cfg80211: fix default HE tx bitrate mask in 2G band"), which however corrects bitmask of HE MCS and recognizes correctly settings of empty legacy rate plus HE MCS rate instead of returning -EINVAL. As suggestions [1], follow the change of SCAN TX to consider this case of offchannel TX as well. [1] https://lore.kernel.org/linux-wireless/[email protected]/T/#m2ac2a6d2be06a37c9c47a3d8a44b4f647ed4f024

Scores

CVSS v3 3.3
EPSS 0.0023
EPSS Percentile 13.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (23)
linux/Kernel 5.14.0 - 6.1.113linux
linux/Kernel 6.11.0 - 6.11.2linux
linux/Kernel 6.2.0 - 6.6.54linux
linux/Kernel 6.7.0 - 6.10.13linux
Linux/Linux < 5.14
Linux/Linux 1b728869a13470e4c25e8faf0dbb95a009c6850b
Linux/Linux 5.10.51 - 5.11
Linux/Linux 5.12.18 - 5.13
Linux/Linux 5.13.3 - 5.14
Linux/Linux 5.14
... and 13 more
Published Oct 21, 2024
Tracked Since Feb 18, 2026