CVE-2024-26682
Vulnerability from cvelistv5
Published
2024-04-02 07:01
Modified
2024-11-05 09:13
Severity ?
Summary
wifi: mac80211: improve CSA/ECSA connection refusal
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a
Impacted products
LinuxLinux
LinuxLinux
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T00:14:12.614Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-26682",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T15:53:16.631814Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-11T17:33:34.654Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/mlme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ea88bde8e3fe",
              "status": "affected",
              "version": "c09c4f31998b",
              "versionType": "git"
            },
            {
              "lessThan": "35e2385dbe78",
              "status": "affected",
              "version": "c09c4f31998b",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/mac80211/mlme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.7"
            },
            {
              "lessThan": "6.7",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.7.*",
              "status": "unaffected",
              "version": "6.7.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.8",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: improve CSA/ECSA connection refusal\n\nAs mentioned in the previous commit, we pretty quickly found\nthat some APs have ECSA elements stuck in their probe response,\nso using that to not attempt to connect while CSA is happening\nwe never connect to such an AP.\n\nImprove this situation by checking more carefully and ignoring\nthe ECSA if cfg80211 has previously detected the ECSA element\nbeing stuck in the probe response.\n\nAdditionally, allow connecting to an AP that\u0027s switching to a\nchannel it\u0027s already using, unless it\u0027s using quiet mode. In\nthis case, we may just have to adjust bandwidth later. If it\u0027s\nactually switching channels, it\u0027s better not to try to connect\nin the middle of that."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-05T09:13:48.564Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a"
        },
        {
          "url": "https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa"
        }
      ],
      "title": "wifi: mac80211: improve CSA/ECSA connection refusal",
      "x_generator": {
        "engine": "bippy-9e1c9544281a"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-26682",
    "datePublished": "2024-04-02T07:01:45.361Z",
    "dateReserved": "2024-02-19T14:20:24.153Z",
    "dateUpdated": "2024-11-05T09:13:48.564Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-26682\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2024-04-02T07:15:44.637\",\"lastModified\":\"2024-04-02T12:50:42.233\",\"vulnStatus\":\"Awaiting Analysis\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211: improve CSA/ECSA connection refusal\\n\\nAs mentioned in the previous commit, we pretty quickly found\\nthat some APs have ECSA elements stuck in their probe response,\\nso using that to not attempt to connect while CSA is happening\\nwe never connect to such an AP.\\n\\nImprove this situation by checking more carefully and ignoring\\nthe ECSA if cfg80211 has previously detected the ECSA element\\nbeing stuck in the probe response.\\n\\nAdditionally, allow connecting to an AP that\u0027s switching to a\\nchannel it\u0027s already using, unless it\u0027s using quiet mode. In\\nthis case, we may just have to adjust bandwidth later. If it\u0027s\\nactually switching channels, it\u0027s better not to try to connect\\nin the middle of that.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: \\\"wifi: mac80211: improve CSA/ECSA connection refusal\\\". Como se mencion\u00f3 en el commit anterior, descubrimos r\u00e1pidamente que algunos AP tienen elementos ECSA atascados en su respuesta de sondeo, por lo que no se pueden usar si intentamos conectarnos mientras se realiza CSA, nunca nos conectaremos a dicho AP. Mejore esta situaci\u00f3n verificando m\u00e1s cuidadosamente e ignorando ECSA si cfg80211 ha detectado previamente que el elemento ECSA est\u00e1 atascado en la respuesta de la sonda. Adem\u00e1s, permita conectarse a un AP que est\u00e9 cambiando a un canal que ya est\u00e9 usando, a menos que est\u00e9 usando el modo silencioso. En este caso, es posible que tengamos que ajustar el ancho de banda m\u00e1s adelante. Si en realidad est\u00e1 cambiando de canal, es mejor no intentar conectarse en medio de eso.\"}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/35e2385dbe787936c793d70755a5177d267a40aa\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ea88bde8e3fefbe4268f6991375dd629895a090a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.