CVE-2024-53189: wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: fix bounds checker error in nl80211parseschedscan
The channels array in the cfg80211scanrequest has a countedby attribute attached to it, which points to the nchannels variable. This attribute is used in bounds checking, and if it is not set before the array is filled, then the bounds sanitizer will issue a warning or a kernel panic if CONFIGUBSANTRAP is set.
This patch sets the size of allocated memory as the initial value for nchannels. It is updated with the actual number of added elements after the array is filled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53189?
CVE-2024-53189 has a severity rating that reflects potential impacts on system stability and security due to the bounds checker error.
How do I fix CVE-2024-53189?
To fix CVE-2024-53189, upgrade to the latest patched versions of the Linux kernel or use the specified versions including 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.15-1.
What products are affected by CVE-2024-53189?
CVE-2024-53189 affects the Linux kernel across various distributions that included vulnerable versions.
Is there a workaround for CVE-2024-53189?
There are no known workarounds for CVE-2024-53189; applying the patch is strongly recommended.
What is the nature of the vulnerability described in CVE-2024-53189?
CVE-2024-53189 is a bounds checker error that can affect the reliability of the wireless scanning process in the Linux kernel.