Improper locking in Linux kernel mac80211

1) Improper locking

EUVDB-ID: #VU94282

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-40912

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the ieee80211_sta_ps_deliver_wakeup() function in net/mac80211/sta_info.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

External links

http://git.kernel.org/stable/c/e51637e0c66a6f72d134d9f95daa47ea62b43c7e
http://git.kernel.org/stable/c/28ba44d680a30c51cf485a2f5a3b680e66ed3932
http://git.kernel.org/stable/c/e7e916d693dcb5a297f40312600a82475f2e63bc
http://git.kernel.org/stable/c/d90bdff79f8e40adf889b5408bfcf521528b169f
http://git.kernel.org/stable/c/9c49b58b9a2bed707e7638576e54c4bccd97b9eb
http://git.kernel.org/stable/c/456bbb8a31e425177dc0e8d4f98728a560c20e81
http://git.kernel.org/stable/c/47d176755d5c0baf284eff039560f8c1ba0ea485
http://git.kernel.org/stable/c/44c06bbde6443de206b30f513100b5670b23fc5e

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.