CVE-2024-27434 — Linux vulnerability

17 documents8 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 96.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
LinuxLinux KernelDebian Linux+4 more
Timeline
PublishedMay 17
Latest updateJul 4

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK with cipher = TKIP and MFP which is of course not possible.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

▶NVDlinux/linux_kernel6.2 — 6.6.23+2
▶Debianlinux/linux_kernel< 6.7.12-1+1
▶Ubuntulinux/linux_kernel< 6.8.0-35.35
▶CVEListV5linux/linux5c75a208c2449c6ea24f07610cc052f6a352246c — b4f1b0b3b91762edd19bf9d3b2e4c3a0740501f8+4
▶debiandebian/linux< linux 6.7.12-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

7
OSV
linux-oracle vulnerabilities↗2024-07-04
▶
OSV
linux-azure, linux-gke vulnerabilities↗2024-06-14
▶
OSV
linux-oem-6.8 vulnerabilities↗2024-06-11
▶
OSV
linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities↗2024-06-07
▶
OSV
linux-aws, linux-gcp vulnerabilities↗2024-06-07
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (Oracle) vulnerabilities↗2024-07-04
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-14
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2024-06-11
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-07
▶
Ubuntu
Linux kernel vulnerabilities↗2024-06-07
▶

💬Community

1
Bugzilla
CVE-2024-27434 kernel: wifi: iwlwifi: mvm: don&#39;t set the MFP flag for the GTK↗2024-05-17
▶
CVE-2024-27434 — Linux vulnerability | cvebase