CVE-2024-27410: wifi: nl80211: reject iftype change with mesh ID change
First published: Fri May 17 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject iftype change with mesh ID change It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data in the wdev->u union for the interface type it currently has, causing cfg80211_change_iface() to do wrong things when switching. We could probably allow setting an interface to mesh while setting the mesh ID at the same time by doing a different order of operations here, but realistically there's no userspace that's going to do this, so just disallow changes in iftype when setting mesh ID.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <4.19.309 | 4.19.309 |
| redhat/kernel | <5.4.271 | 5.4.271 |
| redhat/kernel | <5.10.212 | 5.10.212 |
| redhat/kernel | <5.15.151 | 5.15.151 |
| redhat/kernel | <6.1.81 | 6.1.81 |
| redhat/kernel | <6.6.21 | 6.6.21 |
| redhat/kernel | <6.7.9 | 6.7.9 |
| redhat/kernel | <6.8 | 6.8 |
| debian/linux | 5.10.223-1 5.10.234-1 6.1.129-1 6.1.128-1 6.12.21-1 | |
| IBM Security Verify Governance - Identity Manager | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Software Stack | <=ISVG 10.0.2 | |
| IBM Security Verify Governance, Identity Manager Virtual Appliance | <=ISVG 10.0.2 | |
| IBM Security Verify Governance Identity Manager Container | <=ISVG 10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/063715c33b4c37587aeca2c83cf08ead0c542995
- https://git.kernel.org/stable/c/0cfbb26ee5e7b3d6483a73883f9f6157bca22ec9
- https://git.kernel.org/stable/c/177d574be4b58f832354ab1ef5a297aa0c9aa2df
- https://git.kernel.org/stable/c/930e826962d9f01dcd2220176134427358d112f2
- https://git.kernel.org/stable/c/99eb2159680af8786104dac80528acd5acd45980
- https://git.kernel.org/stable/c/a2add961a5ed25cfd6a74f9ffb9e7ab6d6ded838
- https://git.kernel.org/stable/c/d38d31bbbb9dc0d4d71a45431eafba03d0bc150d
- https://git.kernel.org/stable/c/f78c1375339a291cba492a70eaf12ec501d28a8e
- https://launchpad.net/bugs/cve/CVE-2024-27410
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27410
- https://nvd.nist.gov/vuln/detail/CVE-2024-27410
- https://security-tracker.debian.org/tracker/CVE-2024-27410
- https://ubuntu.com/security/CVE-2024-27410
- https://access.redhat.com/security/cve/CVE-2024-27410
- https://lore.kernel.org/linux-cve-announce/2024051701-CVE-2024-27410-874a@gregkh/T
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2281114
- https://access.redhat.com/errata/RHSA-2024:4211
- https://access.redhat.com/errata/RHSA-2024:4352
- https://access.redhat.com/errata/RHSA-2024:9315
- https://access.redhat.com/errata/RHSA-2025:3510
- https://bugzilla.redhat.com/show_bug.cgi?id=2281113
- https://git.kernel.org/linus/f78c1375339a291cba492a70eaf12ec501d28a8e
- https://www.ibm.com/support/pages/node/7230443 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2024-27410?
CVE-2024-27410 has been rated as a medium severity vulnerability due to the potential for unauthorized mesh ID manipulation.
How do I fix CVE-2024-27410?
To resolve CVE-2024-27410, upgrade to the latest kernel versions: 4.19.309, 5.4.271, 5.10.212, 5.15.151, 6.1.81, 6.6.21, 6.7.9, or 6.8.
Which Linux kernel versions are affected by CVE-2024-27410?
CVE-2024-27410 affects various kernel versions up to and including 6.8.
What types of systems are impacted by CVE-2024-27410?
CVE-2024-27410 primarily impacts Linux-based systems that utilize the affected kernel versions.
Is there a workaround for CVE-2024-27410?
There are no known workarounds for CVE-2024-27410, so upgrading to a patched version is recommended.
- agent/title
- agent/type
- agent/remedy
- agent/first-publish-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- agent/severity
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- collector/mitre-cve
- source/MITRE
- agent/trending
- collector/usn-cve
- source/Ubuntu
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-27410
- agent/software-canonical-lookup
- collector/security-tracker-debian
- source/Debian
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/description
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup-request
- package-manager/redhat
- package-manager/debian
- vendor/ibm
- canonical/ibm security verify governance - identity manager
- version/ibm security verify governance - identity manager/isvg 10.0.2
- canonical/ibm security verify governance, identity manager software stack
- version/ibm security verify governance, identity manager software stack/isvg 10.0.2
- canonical/ibm security verify governance, identity manager virtual appliance
- version/ibm security verify governance, identity manager virtual appliance/isvg 10.0.2
- canonical/ibm security verify governance identity manager container
- version/ibm security verify governance identity manager container/isvg 10.0.2