VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 12, 2024· Updated Nov 3, 2025

wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

CVE-2024-40929

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first.

Affected products

184

Patches

6
62e007bdeb91
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
60d62757df30
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
29a18d56bd64
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
9e719ae3abad
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
f777792952d0
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
3c4771091ea8
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

6

News mentions

0

No linked articles in our index yet.