In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject iftype change with mesh ID change
It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data in the wdev->u union for the interface type it currently has, causing cfg80211_change_iface() to do wrong things when switching.
We could probably allow setting an interface to mesh while setting the mesh ID at the same time by doing a different order of operations here, but realistically there's no userspace that's going to do this, so just disallow changes in iftype when setting mesh ID.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel | Jul 3, 2024 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 3, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade perf-debuginfo | Jul 16, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-rt-vdso | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-gcpUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-genericUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04 | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub