Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's mac80211 Wi-Fi module allows for improper handling of Very High Throughput (VHT) operating mode notifications. VHT specifications do not support channel widths below 20 MHz, specifically 5 MHz and 10 MHz. The absence of a validation check can lead to the processing of malformed notifications, causing a warning due to invalid input. This vulnerability has been addressed by rejecting unsupported channel widths early in the 'sta_link_apply_parameters' function when VHT operating mode notifications are used.
Exploitation of this vulnerability could lead to a warning being triggered due to the processing of invalid VHT channel width notifications, potentially causing disruption in Wi-Fi driver operations.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.