What’s Vulnerable › Vulnerabilities

CVE-2024-46672: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-11 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion wpa_supplicant 2.11 sends since 1efdba5fdc2c ("Handle PMKSA flush in the driver for SAE/OWE offload cases") SSID based PMKSA del commands. brcmfmac is not prepared and tries to dereference the NULL bssid and pmkid pointers in cfg80211_pmksa. PMKID_V3 operations support SSID based updates so copy the SSID.

Affected products

• Linux kernel: from 6.4 before 6.6.48; from 6.7 before 6.10.7; 6.11-rc1, 6.11-rc2, 6.11-rc3 — fixed in 6.10.7, 6.6.48

How to fix

Upgrade to a fixed version: Linux kernel 6.10.7, 6.6.48. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1f566eb912d192c83475a919331aea59619e1197
• https://git.kernel.org/stable/c/2ad4e1ada8eebafa2d75a4b75eeeca882de6ada1
• https://git.kernel.org/stable/c/4291f94f8c6b01505132c22ee27b59ed27c3584f

Get alerted when CVE-2024-46672 or the next vulnerability affects your stack