CVE-2024-26682
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/04/2024
Last modified:
17/03/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mac80211: improve CSA/ECSA connection refusal<br />
<br />
As mentioned in the previous commit, we pretty quickly found<br />
that some APs have ECSA elements stuck in their probe response,<br />
so using that to not attempt to connect while CSA is happening<br />
we never connect to such an AP.<br />
<br />
Improve this situation by checking more carefully and ignoring<br />
the ECSA if cfg80211 has previously detected the ECSA element<br />
being stuck in the probe response.<br />
<br />
Additionally, allow connecting to an AP that&#39;s switching to a<br />
channel it&#39;s already using, unless it&#39;s using quiet mode. In<br />
this case, we may just have to adjust bandwidth later. If it&#39;s<br />
actually switching channels, it&#39;s better not to try to connect<br />
in the middle of that.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.7.5 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



