Vulnerability identifier: #VU92029

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-27053

CWE-ID: CWE-667

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the wilc_parse_join_bss_param() function in drivers/staging/wilc1000/wilc_hif.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/e556006de4ea93abe2b46cba202a2556c544b8b2
http://git.kernel.org/stable/c/b4bbf38c350acb6500cbe667b1e2e68f896e4b38
http://git.kernel.org/stable/c/d80fc436751cfa6b02a8eda74eb6cce7dadfe5a2
http://git.kernel.org/stable/c/745003b5917b610352f52fe0d11ef658d6471ec2
http://git.kernel.org/stable/c/4bfd20d5f5c62b5495d6c0016ee6933bd3add7ce
http://git.kernel.org/stable/c/5800ec78775c0cd646f71eb9bf8402fb794807de
http://git.kernel.org/stable/c/dd50d3ead6e3707bb0a5df7cc832730c93ace3a7
http://git.kernel.org/stable/c/205c50306acf58a335eb19fa84e40140f4fe814f

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.