CVE-2024-46672: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
wpasupplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211pmksa. PMKIDV3 operations support SSID based updates so copy the SSID.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46672?
CVE-2024-46672 is considered a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-46672?
To fix CVE-2024-46672, update to the patched versions of the Linux kernel, specifically versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, or 6.12.11-1.
What is CVE-2024-46672 about?
CVE-2024-46672 addresses a vulnerability in the Linux kernel related to SSID based PMKSA deletion handled improperly by the brcmfmac driver.
Which versions of Linux are affected by CVE-2024-46672?
CVE-2024-46672 affects Linux kernel versions from 6.4 to 6.6.48 and from 6.7 to 6.10.7, along with specific release candidates.
Who is impacted by CVE-2024-46672?
Users and administrators running the affected versions of the Linux kernel in environments utilizing the brcmfmac wireless driver are impacted by CVE-2024-46672.