AZL-51847
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-51847.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-51847
- Upstream
- Published
- 2024-08-17T10:15:09Z
- Modified
- 2026-04-01T05:17:46.336222Z
- Severity
-
- 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- CVE-2024-43841 affecting package kernel for versions less than 5.15.176.3-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: virt_wifi: avoid reporting connection success with wrong SSID
When user issues a connection with a different SSID than the one virt_wifi has advertised, the _cfg80211connectresult() will trigger the warning: WARNON(bssnotfound).
The issue is because the connection code in virtwifi does not check the SSID from user space (it only checks the BSSID), and virtwifi will call cfg80211connectresult() with WLANSTATUSSUCCESS even if the SSID is different from the one virtwifi has advertised. Eventually cfg80211 won't be able to find the cfg80211bss and generate the warning.
Fixed it by checking the SSID (from user space) in the connection code.
- References