Review reviewHigh

CVE-2024-40929

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first.

CVSS: 7.1
EPSS: 0.36%
CISA KEV: Not listed
Published: 2024.07.12

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.36%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= c1a7515393e403758a684fd0a2372af466675b15 < 3c4771091ea8016c8601399078916f722dd8833b, >= c1a7515393e403758a684fd0a2372af466675b15 < f777792952d03bbaf8329fdfa99393a5a33e2640, >= c1a7515393e403758a684fd0a2372af466675b15 < 9e719ae3abad60e245ce248ba3f08148f375a614, >= c1a7515393e403758a684fd0a2372af466675b15 < 29a18d56bd64b95bd10bda4afda512558471382a, >= c1a7515393e403758a684fd0a2372af466675b15 < 62e007bdeb91c6879a4652c3426aef1cd9d2937b, >= c1a7515393e403758a684fd0a2372af466675b15 < 60d62757df30b74bf397a2847a6db7385c6ee281, >= 4.17, >= 4.17 < 5.10.221, >= 5.11 < 5.15.162, >= 5.16 < 6.1.95, >= 6.2 < 6.6.35, >= 6.7 < 6.9.6, 6.10
Fixed versions: 5.10.221, 5.15.162, 6.1.95, 6.6.35, 6.9.6

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125