CVE-2024-40930: wifi: cfg80211: validate HE operation element parsing
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: validate HE operation element parsing
Validate that the HE operation element has the correct length before parsing it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.9.6 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.10 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40930?
CVE-2024-40930 has a severity rating that reflects its potential impact on Linux kernel functionality and security.
How do I fix CVE-2024-40930?
To fix CVE-2024-40930, update the Linux kernel to version 6.9.6 or 6.10 if using Red Hat, or to the specified versions if using Debian.
What systems are affected by CVE-2024-40930?
CVE-2024-40930 affects systems running specific versions of the Linux kernel in Red Hat and Debian distributions.
What type of vulnerability is CVE-2024-40930?
CVE-2024-40930 is a parsing vulnerability in the cfg80211 component of the Linux kernel related to the HE operation element.
Can CVE-2024-40930 be exploited remotely?
CVE-2024-40930 has the potential for exploitation, making it critical to apply patches promptly on affected systems.