CVE-2024-26682

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/04/2024
Last modified:
17/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: mac80211: improve CSA/ECSA connection refusal<br /> <br /> As mentioned in the previous commit, we pretty quickly found<br /> that some APs have ECSA elements stuck in their probe response,<br /> so using that to not attempt to connect while CSA is happening<br /> we never connect to such an AP.<br /> <br /> Improve this situation by checking more carefully and ignoring<br /> the ECSA if cfg80211 has previously detected the ECSA element<br /> being stuck in the probe response.<br /> <br /> Additionally, allow connecting to an AP that&amp;#39;s switching to a<br /> channel it&amp;#39;s already using, unless it&amp;#39;s using quiet mode. In<br /> this case, we may just have to adjust bandwidth later. If it&amp;#39;s<br /> actually switching channels, it&amp;#39;s better not to try to connect<br /> in the middle of that.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.5 (excluding)
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*