In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK with cipher = TKIP and MFP which is of course not possible.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-64k-devel-matchedUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-modules-core | Aug 12, 2024 | May 17, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-coreUpgrade rvUpgrade kernel-uki-virtUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfo | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kb | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1006-oracle-64k | Jul 1, 2024 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub