CVE-2024-26683 wifi: cfg80211: detect stuck ECSA element in probe resp
A Linux kernel Wi-Fi flaw allows a malicious access point to cause connection failures by permanently advertising a stuck channel switch announcement.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-26683?
CVE-2024-26683 is a medium-severity denial of service vulnerability in Linux kernel, published on 2 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: detect stuck ECSA element in probe resp
We recently added some validation that we don't try to connect to an AP that is currently in a channel switch process, since that might want the channel to be quiet or we might not be able to connect in time to hear the switching in a beacon. This was in commit c09c4f31998b ("wifi: mac80211: don't connect to an AP while it's in a CSA process").
However, we promptly got a report that this caused new connection failures, and it turns out that the AP that we now cannot connect to is permanently advertising an extended channel switch announcement, even with quiet. The AP in question was an Asus RT-AC53, with firmware 3.0.0.4.380_10760-g21a5898.
As a first step, attempt to detect that we're dealing with such a situation, so mac80211 can use this later.
Which versions are affected by CVE-2024-26683?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-26683?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-26683 being exploited?
There is no known exploitation of CVE-2024-26683 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-26683, DEBIAN-CVE-2024-26683, GHSA-whqc-wjjv-fvgg, UBUNTU-CVE-2024-26683.