CVE-2024-27410 wifi: nl80211: reject iftype change with mesh ID change
A Linux kernel vulnerability allows memory corruption via improper interface type changes, potentially enabling local privilege escalation or code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-27410?
CVE-2024-27410 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 17 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: nl80211: reject iftype change with mesh ID change
It's currently possible to change the mesh ID when the interface isn't yet in mesh mode, at the same time as changing it into mesh mode. This leads to an overwrite of data in the wdev->u union for the interface type it currently has, causing cfg80211_change_iface() to do wrong things when switching.
We could probably allow setting an interface to mesh while setting the mesh ID at the same time by doing a different order of operations here, but realistically there's no userspace that's going to do this, so just disallow changes in iftype when setting mesh ID.
Which versions are affected by CVE-2024-27410?
It affects 2 products.
Products include Debian Debian Linux, Linux kernel.
How do I fix CVE-2024-27410?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-27410 being exploited?
There is no known exploitation of CVE-2024-27410 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as BELL-CVE-2024-27410, DEBIAN-CVE-2024-27410, GHSA-9vv7-jc87-x8x5, UBUNTU-CVE-2024-27410.