PT-2024-30703 · Linux+5 · Linux Kernel+5
Published
2024-07-08
·
Updated
2025-09-29
·
CVE-2024-43841
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue arises when a user attempts to connect with a different SSID than the one virt wifi has advertised. The connection code in virt wifi does not check the SSID from user space, only checking the BSSID, and virt wifi will call
cfg80211 connect result() with WLAN STATUS SUCCESS even if the SSID is different. This triggers a warning WARN ON(bss not found) because cfg80211 cannot find the cfg80211 bss. The problem is resolved by checking the SSID from user space in the connection code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu