Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-35937
HistoryMay 19, 2024 - 10:10 a.m.

CVE-2024-35937 wifi: cfg80211: check A-MSDU format more carefully

2024-05-1910:10:43
Linux
github.com
2
linux kernel
vulnerability
cve-2024-35937

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: check A-MSDU format more carefully

If it looks like there’s another subframe in the A-MSDU
but the header isn’t fully there, we can end up reading
data out of bounds, only to discard later. Make this a
bit more careful and check if the subframe header can
even be present.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial