CVE-2024-27410

CVE-2024-27410 is a vulnerability in the Linux kernel’s Wi-Fi subsystem, affecting the nl80211 interface. The issue occurs when a mesh ID is set while simultaneously switching the interface to mesh mode, which can overwrite critical data in the wireless device's configuration. This can lead to unexpected behavior or instability. The issue has been resolved by preventing interface type changes during mesh ID updates. Users should update their kernel to a patched version to address this issue and ensure proper system functionality.

Moderate impact is assigned to this vulnerability because exploitation requires local access with privileges to manage wireless devices, confining the potential impact to a local denial of service. Standard Red Hat Enterprise Linux installations are typically deployed in enterprise server environments that do not configure wireless mesh networking or have active Wi-Fi adapters. As a result, systems in standard production environments face minimal exposure to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.