CVE-2024-26682 wifi: mac80211: improve CSA/ECSA connection refusal
A flaw in Linux kernel Wi-Fi handling prevents connections to certain access points, causing a denial of service for users attempting to connect.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-26682?
CVE-2024-26682 is a medium-severity denial of service vulnerability in Linux kernel, published on 2 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: improve CSA/ECSA connection refusal
As mentioned in the previous commit, we pretty quickly found that some APs have ECSA elements stuck in their probe response, so using that to not attempt to connect while CSA is happening we never connect to such an AP.
Improve this situation by checking more carefully and ignoring the ECSA if cfg80211 has previously detected the ECSA element being stuck in the probe response.
Additionally, allow connecting to an AP that's switching to a channel it's already using, unless it's using quiet mode. In this case, we may just have to adjust bandwidth later. If it's actually switching channels, it's better not to try to connect in the middle of that.
Which versions are affected by CVE-2024-26682?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-26682?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-26682 being exploited?
There is no known exploitation of CVE-2024-26682 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-26682, DEBIAN-CVE-2024-26682, GHSA-qxg5-g69m-9vxh, UBUNTU-CVE-2024-26682.