CVE-2024-43879— wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
Possible ATT&CK Techniques 1AI
T1059 · Command and Scripting InterpreterAffected Version Matrix 18
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | c4cbaf7973a794839af080f13748335976cf3f3f< 45d20a1c54be4f3173862c7b950d4468447814c9 | affected |
c4cbaf7973a794839af080f13748335976cf3f3f< b289ebb0516526cb4abae081b7ec29fd4fa1209d | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< 2e201b3d162c6c49417c438ffb30b58c9f85769f | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< 576c64622649f3ec07e97bac8fec8b8a2ef4d086 | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< 16ad67e73309db0c20cc2a651992bd01c05e6b27 | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< 67b5f1054197e4f5553047759c15c1d67d4c8142 | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< 19eaf4f2f5a981f55a265242ada2bf92b0c742dd | affected | ||
c4cbaf7973a794839af080f13748335976cf3f3f< bcbd771cd5d68c0c52567556097d75f9fc4e7cd6 | affected | ||
| … +10 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-43879
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() Currently NL80211_RATE_INFO_HE_RU_ALLOC_2x996 is not handled in cfg80211_calculate_bitrate_he(), leading to below warning: kernel: invalid HE MCS: bw:6, ru:6 kernel: WARNING: CPU: 0 PID: 2312 at net/wireless/util.c:1501 cfg80211_calculate_bitrate_he+0x22b/0x270 [cfg80211] Fix it by handling 2x996 RU allocation in the same way as 160 MHz bandwidth.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 wifi 子系统在处理802.11 HE（High Efficiency）RU（Resource Unit）分配时存在问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-43879
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-43879
请登录查看更多情报信息。
Other References for CVE-2024-43879 (8)
Same Patch Batch · Linux · 2024-08-21 · 69 CVEs total
| CVE-2022-48877 | f2fs: let's avoid panic if extent_tree is not created | |
| CVE-2024-43874 | crypto: ccp - Fix null pointer dereference in __sev_snp_shutdown_locked | |
| CVE-2024-43873 | vhost/vsock: always initialize seqpacket_allow | |
| CVE-2024-43875 | PCI: endpoint: Clean up error handling in vpci_scan_bus() | |
| CVE-2022-48871 | tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer | |
| CVE-2022-48872 | misc: fastrpc: Fix use-after-free race condition for maps | |
| CVE-2022-48873 | misc: fastrpc: Don't remove map on creater_process and device_release | |
| CVE-2022-48874 | misc: fastrpc: Fix use-after-free and race in fastrpc_map_find | |
| CVE-2022-48875 | wifi: mac80211: sdata can be NULL during AMPDU start | |
| CVE-2022-48876 | wifi: mac80211: fix initialization of rx->link and rx->link_sta | |
| CVE-2022-48870 | tty: fix possible null-ptr-defer in spk_ttyio_release | |
| CVE-2022-48878 | Bluetooth: hci_qca: Fix driver shutdown on closed serdev | |
| CVE-2022-48879 | efi: fix NULL-deref in init error path | |
| CVE-2022-48880 | platform/surface: aggregator: Add missing call to ssam_request_sync_free() | |
| CVE-2022-48881 | platform/x86/amd: Fix refcount leak in amd_pmc_probe | |
| CVE-2022-48882 | net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) | |
| CVE-2022-48883 | net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent | |
| CVE-2022-48884 | net/mlx5: Fix command stats access after free | |
| CVE-2022-48885 | ice: Fix potential memory leak in ice_gnss_tty_write() | |
| CVE-2022-48886 | ice: Add check for kzalloc |
Showing top 20 of 69 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64206
Bluetooth: L2CAP: cancel pending_rx_work before taking conn- - CVE-2026-64207
net/sched: dualpi2: fix GSO backlog accounting - CVE-2026-64205
i2c: i801: fix hardware state machine corruption in error pa - CVE-2026-64192
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM i - CVE-2026-64191
i2c: stub: Reject I2C block transfers with invalid length
Same vendor: Linux
- CVE-2026-64206
Bluetooth: L2CAP: cancel pending_rx_work before taking conn- - CVE-2026-64207
net/sched: dualpi2: fix GSO backlog accounting - CVE-2026-64205
i2c: i801: fix hardware state machine corruption in error pa - CVE-2026-64192
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM i - CVE-2026-64191
i2c: stub: Reject I2C block transfers with invalid length
V. Comments for CVE-2024-43879
No comments yet