CVE-2024-46827 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware crash. This issue arises when EHT-PHY capabilities shows support for a bandwidth and MCS-NSS set for that particular bandwidth is filled by zeros and due to this, driver obtains peer_nss as 0 and sending this value to firmware causes crash. Address this issue by implementing a validation step for the peer_nss value before passing it to the firmware. If the value is greater than zero, proceed with forwarding it to the firmware. However, if the value is invalid, reject the association request to prevent potential firmware crashes. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1
A vulnerability in the Linux kernel's ath12k wireless driver can lead to a firmware crash. This issue occurs when an access point receives an association request with an Extended HE Capabilities Information Element that includes an invalid MCS-NSS. Specifically, if the MCS-NSS for a supported bandwidth is set to zero, the driver interprets the peer_nss as zero. Sending this invalid value to the firmware causes a crash. The vulnerability has been addressed by adding a validation step for the peer_nss value before it is sent to the firmware. If the value is greater than zero, it is forwarded to the firmware; if not, the association request is rejected to prevent a crash.
Users can update to the patched version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the latest kernel version can be found on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Sep 29, 2024References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/25a15f80253a7c8776e4e4880d797d20ec864154 | kernel.org | Patch |
| https://git.kernel.org/stable/c/838c2cfdb6be7d7d8c06c711edf893eb34ca2e7c | kernel.org | Patch |
| https://git.kernel.org/stable/c/db163a463bb93cd3e37e1e7b10b9726fb6f95857 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | < 6.6.51 >= 6.10, < 6.10.10 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 20, 2024 | Initial Analysis | [email protected] |
| Sep 27, 2024 | New CVE Received | kernel.org |