In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
In some versions of cfg80211, the ssids poinet might be a valid one even though nssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking nssids first.
[
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v11"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e719ae3abad60e245ce248ba3f08148f375a614",
"signature_version": "v1",
"id": "CVE-2024-40929-0ba21830",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f777792952d03bbaf8329fdfa99393a5a33e2640",
"signature_version": "v1",
"id": "CVE-2024-40929-185435e2",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29a18d56bd64b95bd10bda4afda512558471382a",
"signature_version": "v1",
"id": "CVE-2024-40929-1e6f49e2",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62e007bdeb91c6879a4652c3426aef1cd9d2937b",
"signature_version": "v1",
"id": "CVE-2024-40929-2a933944",
"deprecated": false
},
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v11"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62e007bdeb91c6879a4652c3426aef1cd9d2937b",
"signature_version": "v1",
"id": "CVE-2024-40929-34350aff",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4771091ea8016c8601399078916f722dd8833b",
"signature_version": "v1",
"id": "CVE-2024-40929-380df481",
"deprecated": false
},
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v10"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f777792952d03bbaf8329fdfa99393a5a33e2640",
"signature_version": "v1",
"id": "CVE-2024-40929-45e82c1d",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e719ae3abad60e245ce248ba3f08148f375a614",
"signature_version": "v1",
"id": "CVE-2024-40929-53fce965",
"deprecated": false
},
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v11"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60d62757df30b74bf397a2847a6db7385c6ee281",
"signature_version": "v1",
"id": "CVE-2024-40929-5c8683e4",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60d62757df30b74bf397a2847a6db7385c6ee281",
"signature_version": "v1",
"id": "CVE-2024-40929-795212cd",
"deprecated": false
},
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v10"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4771091ea8016c8601399078916f722dd8833b",
"signature_version": "v1",
"id": "CVE-2024-40929-7a870f3a",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c4771091ea8016c8601399078916f722dd8833b",
"signature_version": "v1",
"id": "CVE-2024-40929-7fc1a467",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@60d62757df30b74bf397a2847a6db7385c6ee281",
"signature_version": "v1",
"id": "CVE-2024-40929-8dde79d7",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9e719ae3abad60e245ce248ba3f08148f375a614",
"signature_version": "v1",
"id": "CVE-2024-40929-9c927165",
"deprecated": false
},
{
"digest": {
"function_hash": "213027509775191183727101140883102756981",
"length": 1357.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell_v11"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29a18d56bd64b95bd10bda4afda512558471382a",
"signature_version": "v1",
"id": "CVE-2024-40929-a917416a",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62e007bdeb91c6879a4652c3426aef1cd9d2937b",
"signature_version": "v1",
"id": "CVE-2024-40929-ab071cd1",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"43678992897576440041545411979916437468",
"111686412316689968643456492551715489697",
"43712714639529358033042868842971514218",
"198768262452081059749806216867784533207",
"264958634188466498586693638350896096116",
"64841112149490084340479100463101451703",
"168750521843006501320716445699839801227",
"288856416060579473844645933765108728790"
]
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c"
},
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@29a18d56bd64b95bd10bda4afda512558471382a",
"signature_version": "v1",
"id": "CVE-2024-40929-bd6f6ad0",
"deprecated": false
},
{
"digest": {
"function_hash": "103308620064026371841089554503373349965",
"length": 2761.0
},
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/scan.c",
"function": "iwl_mvm_scan_umac_dwell"
},
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f777792952d03bbaf8329fdfa99393a5a33e2640",
"signature_version": "v1",
"id": "CVE-2024-40929-cd9ccb26",
"deprecated": false
}
]