CVE-2024-47738 (GCVE-0-2024-47738)
Vulnerability from cvelistv5
Published
2024-10-21 12:14
Modified
2025-11-03 22:21
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't use rate mask for offchannel TX either Like the commit ab9177d83c04 ("wifi: mac80211: don't use rate mask for scanning"), ignore incorrect settings to avoid no supported rate warning reported by syzbot. The syzbot did bisect and found cause is commit 9df66d5b9f45 ("cfg80211: fix default HE tx bitrate mask in 2G band"), which however corrects bitmask of HE MCS and recognizes correctly settings of empty legacy rate plus HE MCS rate instead of returning -EINVAL. As suggestions [1], follow the change of SCAN TX to consider this case of offchannel TX as well. [1] https://lore.kernel.org/linux-wireless/6ab2dc9c3afe753ca6fdcdd1421e7a1f47e87b84.camel@sipsolutions.net/T/#m2ac2a6d2be06a37c9c47a3d8a44b4f647ed4f024
References
Impacted products
Vendor Product Version
Linux Linux Version: 9df66d5b9f45c39b3925d16e8947cc10009b186d
Version: 9df66d5b9f45c39b3925d16e8947cc10009b186d
Version: 9df66d5b9f45c39b3925d16e8947cc10009b186d
Version: 9df66d5b9f45c39b3925d16e8947cc10009b186d
Version: 9df66d5b9f45c39b3925d16e8947cc10009b186d
Version: 1b728869a13470e4c25e8faf0dbb95a009c6850b
Version: ccedf8163fa66f2db85d863a43f056ac69a5fef5
Version: 5924678a442d0f5ebf33ebb76b470e68414f1318
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47738",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-21T12:59:35.373697Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-21T13:04:14.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:21:34.018Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/net/mac80211.h",
            "net/mac80211/offchannel.c",
            "net/mac80211/rate.c",
            "net/mac80211/scan.c",
            "net/mac80211/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "aafca50e71dc8f3192a5bfb325135a7908f3ef9e",
              "status": "affected",
              "version": "9df66d5b9f45c39b3925d16e8947cc10009b186d",
              "versionType": "git"
            },
            {
              "lessThan": "d54455a3a965feb547711aff7afd2ca5deadb99c",
              "status": "affected",
              "version": "9df66d5b9f45c39b3925d16e8947cc10009b186d",
              "versionType": "git"
            },
            {
              "lessThan": "3565ef215101ffadb5fe5394c70b1fca51376b25",
              "status": "affected",
              "version": "9df66d5b9f45c39b3925d16e8947cc10009b186d",
              "versionType": "git"
            },
            {
              "lessThan": "43897111481b679508711d3ca881c4c6593e9247",
              "status": "affected",
              "version": "9df66d5b9f45c39b3925d16e8947cc10009b186d",
              "versionType": "git"
            },
            {
              "lessThan": "e7a7ef9a0742dbd0818d5b15fba2c5313ace765b",
              "status": "affected",
              "version": "9df66d5b9f45c39b3925d16e8947cc10009b186d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1b728869a13470e4c25e8faf0dbb95a009c6850b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ccedf8163fa66f2db85d863a43f056ac69a5fef5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5924678a442d0f5ebf33ebb76b470e68414f1318",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/net/mac80211.h",
            "net/mac80211/offchannel.c",
            "net/mac80211/rate.c",
            "net/mac80211/scan.c",
            "net/mac80211/tx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.14"
            },
            {
              "lessThan": "5.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.54",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.11.*",
              "status": "unaffected",
              "version": "6.11.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.12",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.54",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.13",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11.2",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12",
                  "versionStartIncluding": "5.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.51",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.12.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.13.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: don\u0027t use rate mask for offchannel TX either\n\nLike the commit ab9177d83c04 (\"wifi: mac80211: don\u0027t use rate mask for\nscanning\"), ignore incorrect settings to avoid no supported rate warning\nreported by syzbot.\n\nThe syzbot did bisect and found cause is commit 9df66d5b9f45 (\"cfg80211:\nfix default HE tx bitrate mask in 2G band\"), which however corrects\nbitmask of HE MCS and recognizes correctly settings of empty legacy rate\nplus HE MCS rate instead of returning -EINVAL.\n\nAs suggestions [1], follow the change of SCAN TX to consider this case of\noffchannel TX as well.\n\n[1] https://lore.kernel.org/linux-wireless/6ab2dc9c3afe753ca6fdcdd1421e7a1f47e87b84.camel@sipsolutions.net/T/#m2ac2a6d2be06a37c9c47a3d8a44b4f647ed4f024"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T12:59:04.168Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/aafca50e71dc8f3192a5bfb325135a7908f3ef9e"
        },
        {
          "url": "https://git.kernel.org/stable/c/d54455a3a965feb547711aff7afd2ca5deadb99c"
        },
        {
          "url": "https://git.kernel.org/stable/c/3565ef215101ffadb5fe5394c70b1fca51376b25"
        },
        {
          "url": "https://git.kernel.org/stable/c/43897111481b679508711d3ca881c4c6593e9247"
        },
        {
          "url": "https://git.kernel.org/stable/c/e7a7ef9a0742dbd0818d5b15fba2c5313ace765b"
        }
      ],
      "title": "wifi: mac80211: don\u0027t use rate mask for offchannel TX either",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-47738",
    "datePublished": "2024-10-21T12:14:07.825Z",
    "dateReserved": "2024-09-30T16:00:12.959Z",
    "dateUpdated": "2025-11-03T22:21:34.018Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2025-11-03T22:21:34.018Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-47738\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-21T12:59:35.373697Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-21T12:59:38.528Z\"}}], \"cna\": {\"title\": \"wifi: mac80211: don\u0027t use rate mask for offchannel TX either\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"9df66d5b9f45c39b3925d16e8947cc10009b186d\", \"lessThan\": \"aafca50e71dc8f3192a5bfb325135a7908f3ef9e\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9df66d5b9f45c39b3925d16e8947cc10009b186d\", \"lessThan\": \"d54455a3a965feb547711aff7afd2ca5deadb99c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9df66d5b9f45c39b3925d16e8947cc10009b186d\", \"lessThan\": \"3565ef215101ffadb5fe5394c70b1fca51376b25\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9df66d5b9f45c39b3925d16e8947cc10009b186d\", \"lessThan\": \"43897111481b679508711d3ca881c4c6593e9247\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9df66d5b9f45c39b3925d16e8947cc10009b186d\", \"lessThan\": \"e7a7ef9a0742dbd0818d5b15fba2c5313ace765b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"1b728869a13470e4c25e8faf0dbb95a009c6850b\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ccedf8163fa66f2db85d863a43f056ac69a5fef5\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"5924678a442d0f5ebf33ebb76b470e68414f1318\", \"versionType\": \"git\"}], \"programFiles\": [\"include/net/mac80211.h\", \"net/mac80211/offchannel.c\", \"net/mac80211/rate.c\", \"net/mac80211/scan.c\", \"net/mac80211/tx.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.14\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.14\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"6.1.113\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6.54\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.6.*\"}, {\"status\": \"unaffected\", \"version\": \"6.10.13\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.10.*\"}, {\"status\": \"unaffected\", \"version\": \"6.11.2\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.11.*\"}, {\"status\": \"unaffected\", \"version\": \"6.12\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"include/net/mac80211.h\", \"net/mac80211/offchannel.c\", \"net/mac80211/rate.c\", \"net/mac80211/scan.c\", \"net/mac80211/tx.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/aafca50e71dc8f3192a5bfb325135a7908f3ef9e\"}, {\"url\": \"https://git.kernel.org/stable/c/d54455a3a965feb547711aff7afd2ca5deadb99c\"}, {\"url\": \"https://git.kernel.org/stable/c/3565ef215101ffadb5fe5394c70b1fca51376b25\"}, {\"url\": \"https://git.kernel.org/stable/c/43897111481b679508711d3ca881c4c6593e9247\"}, {\"url\": \"https://git.kernel.org/stable/c/e7a7ef9a0742dbd0818d5b15fba2c5313ace765b\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nwifi: mac80211: don\u0027t use rate mask for offchannel TX either\\n\\nLike the commit ab9177d83c04 (\\\"wifi: mac80211: don\u0027t use rate mask for\\nscanning\\\"), ignore incorrect settings to avoid no supported rate warning\\nreported by syzbot.\\n\\nThe syzbot did bisect and found cause is commit 9df66d5b9f45 (\\\"cfg80211:\\nfix default HE tx bitrate mask in 2G band\\\"), which however corrects\\nbitmask of HE MCS and recognizes correctly settings of empty legacy rate\\nplus HE MCS rate instead of returning -EINVAL.\\n\\nAs suggestions [1], follow the change of SCAN TX to consider this case of\\noffchannel TX as well.\\n\\n[1] https://lore.kernel.org/linux-wireless/6ab2dc9c3afe753ca6fdcdd1421e7a1f47e87b84.camel@sipsolutions.net/T/#m2ac2a6d2be06a37c9c47a3d8a44b4f647ed4f024\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.113\", \"versionStartIncluding\": \"5.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6.54\", \"versionStartIncluding\": \"5.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.10.13\", \"versionStartIncluding\": \"5.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.11.2\", \"versionStartIncluding\": \"5.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.12\", \"versionStartIncluding\": \"5.14\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.10.51\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.12.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"5.13.3\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-05-04T12:59:04.168Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-47738\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-11-03T22:21:34.018Z\", \"dateReserved\": \"2024-09-30T16:00:12.959Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2024-10-21T12:14:07.825Z\", \"assignerShortName\": \"Linux\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.