Threats tagged 'ghsa-3g2p-rjfc-78cj'

CVE-2024-41072 is a medium severity vulnerability in the Linux kernel's wifi subsystem (cfg80211 wext interface). It addresses an issue where the number of channels passed via the SIOCSIWSCAN ioctl call was not properly checked against the maximum allowed (IW_MAX_FREQUENCIES). The fix adds an extra validation step to reject invalid requests that exceed this limit, preventing potential denial of service.