CVE-2024-5290 Privilege escalation in wpa supplicant
Local unprivileged attackers can escalate privileges to root by loading arbitrary shared objects via wpa_supplicant on Ubuntu systems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-5290?
CVE-2024-5290 is a high-severity vulnerability in Canonical Ltd. wpa_supplicant, published on 7 Aug 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root).
Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.
Weakness: CWE-427
Which versions are affected by CVE-2024-5290?
It affects 1 product.
Products include W1.fi Wpa Supplicant.
How do I fix CVE-2024-5290?
Apply the vendor's patch.
Is CVE-2024-5290 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5290 exists.
Other vulnerabilities in Canonical Ltd. wpa_supplicant
Sources
Also known as BELL-CVE-2024-5290, DEBIAN-CVE-2024-5290, DSA-5739-1, GHSA-c2m5-cmpw-rjcx, OESA-2024-2142, UBUNTU-CVE-2024-5290 and 1 more.