CVE-2024-26683

Summary (CVE-2024-26683): In the Linux kernel’s wireless stack, a change intended to avoid connecting to an AP during a CSA channel switch inadvertently caused connection failures with some APs that permanently advertise an extended channel switch announcement (e.g., Asus RT-AC53 with firmware 3....

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security issue with CSA/ECSA in wifi:mac80211...

CVE-2024-26683

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: detect stuck ECSA element in probe resp We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we...

PT-2024-21461 · Asus +1 · Asus Rt-Ac53U +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's wifi functionality, specifically with the cfg80211 module. A problem was introduced when validation was added to prevent connections to an...

CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

CVE-2023-33019

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

Code injection

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

Code injection

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33019

CVE-2023-33019 describes a Transient Denial of Service in the WLAN Host when a mobile station processes a Channel Switch Announcement (CSA) with an invalid channel. Public sources associate this CVE with Qualcomm WLAN components (high severity, CVSSv3.1: 7.5; network attack vector, no user intera...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-28584 Improper Authorization in WLAN Host

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement CSA...

CVE-2023-28584

CVE-2023-28584 describes a transient DoS in Qualcomm WLAN Host when a mobile station receives an invalid channel in the Channel Switch Announcement (CSA) Information Element during a CSA. Affected component: Qualcomm WLAN/closed‑source WLAN stack in Qualcomm chipsets mentioned in multiple records...

PT-2023-24142 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Host when a mobile station receives an invalid channel in the Channel Switch Announcement CSA Information Element IE...

PT-2023-21831 · Qualcomm · Qualcomm Aqt1000

Name of the Vulnerable Software and Affected Versions: Qualcomm AQT1000 affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Host. This occurs when a mobile station receives an invalid channel in the Channel Switch Announcement CSA...

PT-2023-24144 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the WLAN Host. This occurs when an invalid channel, such as a channel out of range, is received in the Station STA during a...

Stable Channel Update for ChromeOS / ChromeOS Flex

ChromeOS M115 Stable The Stable channel is being updated to OS version: 15474.61.0 Browser version: 115.0.5790.131 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community ...

kernel: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

kernel: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the fo...

SUSE CVE-2006-7179

ieee80211input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements CSA IEs, which allows remote attackers to cause a denial of service loss of communication via a Channel Switch Count less than or equal to one, triggering a channel change...