CVE-2024-56663

Summary

CVE-2024-56663 is a vulnerability affecting the Linux kernel's wifi driver, nl80211. This issue arises due to an off-by-one error in the handling of the netlink attribute NL80211_ATTR_MLO_LINK_ID. Since the netlink attribute range validation includes the max value, a value higher than IEEE80211_MLD_MAX_NUM_LINKS - 1 will cause an off-by-one error. This error can lead to a crash, as demonstrated in a stack trace involving the ieee80211_tx_control_port function. To address this vulnerability, it is essential to ensure proper validation of netlink attributes to prevent potential crashes or unintended behavior.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.