CVE-2024-43841: wifi: virt_wifi: avoid reporting connection success with wrong SSID
In the Linux kernel, the following vulnerability has been resolved:
wifi: virtwifi: avoid reporting connection success with wrong SSID
When user issues a connection with a different SSID than the one virtwifi has advertised, the cfg80211connectresult() will trigger the warning: WARNON(bssnotfound).
The issue is because the connection code in virtwifi does not check the SSID from user space (it only checks the BSSID), and virtwifi will call cfg80211connectresult() with WLANSTATUSSUCCESS even if the SSID is different from the one virtwifi has advertised. Eventually cfg80211 won't be able to find the cfg80211bss and generate the warning.
Fixed it by checking the SSID (from user space) in the connection code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.129-1~deb11u1 - Compensating control
In virt_wifi connection code, check the user-space SSID against the advertised SSID before reporting a successful connection; do not call cfg80211_connect_result() with WLAN_STATUS_SUCCESS when the SSIDs differ.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43841?
CVE-2024-43841 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-43841?
To mitigate CVE-2024-43841, ensure you upgrade to a patched version of the Linux kernel, such as 5.10.226-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-43841?
CVE-2024-43841 affects specific versions of the Linux kernel ranging from 5.0 to 6.10.3.
What type of vulnerability is CVE-2024-43841?
CVE-2024-43841 is a connectivity issue within the virt_wifi module of the Linux kernel.
Will CVE-2024-43841 affect my wireless connection?
Yes, CVE-2024-43841 can cause incorrect success reports for wireless connections using an incorrect SSID.