CVE-2024-49937: wifi: cfg80211: Set correct chandef when starting CAC
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Set correct chandef when starting CAC
When starting CAC in a mode other than AP mode, it return a "WARNING: CPU: 0 PID: 63 at cfg80211chandefdfsusable+0x20/0xaf [cfg80211]" caused by the chandef.chan being null at the end of CAC.
Solution: Ensure the channel definition is set for the different modes when starting CAC to avoid getting a NULL 'chan' at the end of CAC.
Call Trace: ? showregs.part.0+0x14/0x16 ? warn+0x67/0xc0 ? cfg80211chandefdfsusable+0x20/0xaf [cfg80211] ? reportbug+0xa7/0x130 ? excoverflow+0x30/0x30 ? handlebug+0x27/0x50 ? excinvalidop+0x18/0x60 ? handleexception+0xf6/0xf6 ? excoverflow+0x30/0x30 ? cfg80211chandefdfsusable+0x20/0xaf [cfg80211] ? excoverflow+0x30/0x30 ? cfg80211chandefdfsusable+0x20/0xaf [cfg80211] ? regulatorypropagatedfsstate.cold+0x1b/0x4c [cfg80211] ? cfg80211propagatecacdonewk+0x1a/0x30 [cfg80211] ? processonework+0x165/0x280 ? workerthread+0x120/0x3f0 ? kthread+0xc2/0xf0 ? processonework+0x280/0x280 ? kthreadcompleteandexit+0x20/0x20 ? retfromfork+0x19/0x24
[shorten subject, remove OCB, reorder cases to match previous list]
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49937?
CVE-2024-49937 has a critical severity due to potential disruptions in wireless communications.
How do I fix CVE-2024-49937?
To fix CVE-2024-49937, upgrade to the latest patched version of the Linux kernel, such as 6.1.123-1 or higher.
Which versions of the Linux kernel are affected by CVE-2024-49937?
CVE-2024-49937 affects Linux kernel versions ranging from 5.10.223-1 to 6.6.55, excluding certain fixed versions.
What type of vulnerability is CVE-2024-49937?
CVE-2024-49937 is a vulnerability in the cfg80211 component of the Linux kernel related to handling channel definitions.
What impact does CVE-2024-49937 have on system performance?
CVE-2024-49937 may cause system warnings and affect wireless communication operations when starting Channel Availability Check (CAC) in unsupported modes.