CVE-2024-46672

wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

published September 11, 2024

CVSS
—
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the

driver for SAE/OWE offload cases") SSID based PMKSA del commands.

brcmfmac is not prepared and tries to dereference the NULL bssid and

pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based

updates so copy the SSID.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.4th percentile
Published
2024-09-11T15:14Z
EPSS history
Timeline
  • 11 SEP 15:14Z
    wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
    cvelistv5