Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-46672

wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based updates so copy the SSID.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a96202acaea47fa8377088e0952bb63bd02a3bab to < 4291f94f8c6b01505132c22ee27b59ed27c3584faffected
  • a96202acaea47fa8377088e0952bb63bd02a3bab to < 1f566eb912d192c83475a919331aea59619e1197affected
  • a96202acaea47fa8377088e0952bb63bd02a3bab to < 2ad4e1ada8eebafa2d75a4b75eeeca882de6ada1affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.48 to ≤ 6.6.*unaffected
  • 6.10.7 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References