Critical Vulnerability in Linux Package: Infinite Loop in 6 GHz Scan Construction
Summary
DEBIAN-CVE-2024-53055: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix 6 GHz scan construction If more than 255 colocated APs exist for the set of all APs found during 2.4/5 GHz scanning, then the 6... Affects linux versions < 6.1.119-1. Fixed in 6.1.119-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and versions, including Debian 11, 12, 13, and 14. This package is crucial for system stability and performance, but it is also susceptible to vulnerabilities that can compromise its functionality and security.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the iwlwifi driver related to the construction of 6 GHz scans. When more than 255 colocated Access Points (APs) are detected during 2.4/5 GHz scanning, the scan construction can enter an infinite loop. This occurs because the loop variable is of type u8, which cannot exceed 255, while the number of detected APs is stored in a u32 variable. This flaw can lead to system instability and hinder wireless connectivity, as the scanning process fails to complete.
How To Fix
Minimum fixed version
6.1.119-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. Users are advised to monitor the situation and apply the patch as soon as it becomes available.
Conclusion
The identified vulnerability in the Linux package poses a significant risk to system stability and wireless connectivity. Users are urged to update their packages to the patched versions to mitigate this risk. Regular monitoring and timely updates are essential to maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an infinite loop in the 6 GHz scan construction of the iwlwifi driver, triggered when more than 255 colocated APs are detected.
The affected versions include Linux 6.1 for Debian 11, Linux 6.1 for Debian 12, and Linux 6.11 for Debian 13 and 14.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to system instability and connectivity issues, as the scanning process for wireless networks may fail to complete.
The patch has already been released, and users are encouraged to update their systems to the latest versions as soon as possible.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
