VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Aug 21, 2024· Updated May 12, 2026

CVE-2024-43879

CVE-2024-43879

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()

Currently NL80211_RATE_INFO_HE_RU_ALLOC_2x996 is not handled in cfg80211_calculate_bitrate_he(), leading to below warning:

kernel: invalid HE MCS: bw:6, ru:6 kernel: WARNING: CPU: 0 PID: 2312 at net/wireless/util.c:1501 cfg80211_calculate_bitrate_he+0x22b/0x270 [cfg80211]

Fix it by handling 2x996 RU allocation in the same way as 160 MHz bandwidth.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Missing handling of 2x996 RU allocation in cfg80211_calculate_bitrate_he() causes a kernel warning; fixed by treating it as 160 MHz.

Root

Cause

In the Linux kernel's cfg80211 subsystem, the function cfg80211_calculate_bitrate_he() lacks a case for the NL80211_RATE_INFO_HE_RU_ALLOC_2x996 Resource Unit (RU) allocation. When a 2x996 RU is encountered, the function defaults to an invalid HE MCS combination (bw:6, ru:6), triggering a kernel warning: 'invalid HE MCS: bw:6, ru:6' [description].

Attack

Vector

This vulnerability is triggered locally by a user or process that can influence the wireless configuration to produce such an RU allocation. No network-level authentication is required; however, the attacker must have the ability to inject or manipulate certain wireless parameters, which typically requires local access or elevated privileges on the system.

Impact

Successful exploitation results in a kernel warning and, in worst-case scenarios, a denial of service due to the warning's potential to cause system instability or crash under certain conditions. The impact is limited to availability (high), with no impact on confidentiality or integrity according to the CVSS v3.1 base score of 5.5 [description].

Mitigation

The fix has been applied upstream in the Linux kernel stable branches as commit 2e201b3d162c6c49417c438ffb30b58c9f85769f [3] and commit 45d20a1c54be4f086e2c7b950d4468447814c9 [4]. Administrators are advised to update to the latest kernel version containing these patches.

References
  1. Making sure you're not a bot!
  2. Making sure you're not a bot!

AI Insight generated on May 20, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

120

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

12

News mentions

0

No linked articles in our index yet.