Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-35937
HistoryMay 19, 2024 - 11:15 a.m.

CVE-2024-35937

2024-05-1911:15:49
Debian Security Bug Tracker
security-tracker.debian.org
8
linux kernel
wifi
vulnerability
cfg80211
a-msdu
data bounds

AI Score

6.9

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there’s another subframe in the A-MSDU but the header isn’t fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more careful and check if the subframe header can even be present.

AI Score

6.9

Confidence

High

EPSS

0

Percentile

15.5%