CVE-2024-40929

wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

State: Published
Severity: 7.1 High
Published: Jul 12, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c1a7515393e403758a684fd0a2372af466675b15 to before 3c4771091ea8016c8601399078916f722dd8833bAffected c1a7515393e403758a684fd0a2372af466675b15 to before f777792952d03bbaf8329fdfa99393a5a33e2640Affected c1a7515393e403758a684fd0a2372af466675b15 to before 9e719ae3abad60e245ce248ba3f08148f375a614Affected c1a7515393e403758a684fd0a2372af466675b15 to before 29a18d56bd64b95bd10bda4afda512558471382aAffected c1a7515393e403758a684fd0a2372af466675b15 to before 62e007bdeb91c6879a4652c3426aef1cd9d2937bAffected c1a7515393e403758a684fd0a2372af466675b15 to before 60d62757df30b74bf397a2847a6db7385c6ee281Affected
LinuxLinux	4.17Affected before 4.17Not affected 5.10.221 through 5.10.Not affected 5.15.162 through 5.15.Not affected 6.1.95 through 6.1.Not affected 6.6.35 through 6.6.Not affected 6.9.6 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

c1a7515393e403758a684fd0a2372af466675b15 to before 3c4771091ea8016c8601399078916f722dd8833bAffected
c1a7515393e403758a684fd0a2372af466675b15 to before f777792952d03bbaf8329fdfa99393a5a33e2640Affected
c1a7515393e403758a684fd0a2372af466675b15 to before 9e719ae3abad60e245ce248ba3f08148f375a614Affected
c1a7515393e403758a684fd0a2372af466675b15 to before 29a18d56bd64b95bd10bda4afda512558471382aAffected
c1a7515393e403758a684fd0a2372af466675b15 to before 62e007bdeb91c6879a4652c3426aef1cd9d2937bAffected
c1a7515393e403758a684fd0a2372af466675b15 to before 60d62757df30b74bf397a2847a6db7385c6ee281Affected

LinuxLinux

4.17Affected
before 4.17Not affected
5.10.221 through 5.10.*Not affected
5.15.162 through 5.15.*Not affected
6.1.95 through 6.1.*Not affected
6.6.35 through 6.6.*Not affected
6.9.6 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.