CVE-2024-40929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-40929
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40929.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-40929
- Downstream
- Related
- Published
- 2024-07-12T12:25:08.434Z
- Modified
- 2025-11-28T02:34:15.507927Z
- Summary
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
In some versions of cfg80211, the ssids poinet might be a valid one even though nssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking nssids first.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40929.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/29a18d56bd64b95bd10bda4afda512558471382a
- https://git.kernel.org/stable/c/3c4771091ea8016c8601399078916f722dd8833b
- https://git.kernel.org/stable/c/60d62757df30b74bf397a2847a6db7385c6ee281
- https://git.kernel.org/stable/c/62e007bdeb91c6879a4652c3426aef1cd9d2937b
- https://git.kernel.org/stable/c/9e719ae3abad60e245ce248ba3f08148f375a614
- https://git.kernel.org/stable/c/f777792952d03bbaf8329fdfa99393a5a33e2640
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40929.json
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-40929
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc1a7515393e403758a684fd0a2372af466675b15Fixed3c4771091ea8016c8601399078916f722dd8833bFixedf777792952d03bbaf8329fdfa99393a5a33e2640Fixed9e719ae3abad60e245ce248ba3f08148f375a614Fixed29a18d56bd64b95bd10bda4afda512558471382aFixed62e007bdeb91c6879a4652c3426aef1cd9d2937bFixed60d62757df30b74bf397a2847a6db7385c6ee281