- 7.1HighCVSS base score
- 0.36%Exploitation in 30 daysEPSS · top 69% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first.
Timeline
ID reserved
By Linux
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.1 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
| NVDNVD · Modified | 3.1 | High7.1 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.36% · top 69% of all CVEs (12 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.1.
Affected products
- affected c1a7515393e403758a684fd0a2372af466675b15 – < 3c4771091ea8016c8601399078916f722dd8833b
- affected c1a7515393e403758a684fd0a2372af466675b15 – < f777792952d03bbaf8329fdfa99393a5a33e2640
- affected c1a7515393e403758a684fd0a2372af466675b15 – < 9e719ae3abad60e245ce248ba3f08148f375a614
- affected c1a7515393e403758a684fd0a2372af466675b15 – < 29a18d56bd64b95bd10bda4afda512558471382a
- affected c1a7515393e403758a684fd0a2372af466675b15 – < 62e007bdeb91c6879a4652c3426aef1cd9d2937b
- affected c1a7515393e403758a684fd0a2372af466675b15 – < 60d62757df30b74bf397a2847a6db7385c6ee281
- affected 4.17
- unaffected < 4.17
- unaffected 5.10.221 – ≤ 5.10.*
- unaffected 5.15.162 – ≤ 5.15.*
- unaffected 6.1.95 – ≤ 6.1.*
- unaffected 6.6.35 – ≤ 6.6.*
- unaffected 6.9.6 – ≤ 6.9.*
- unaffected 6.10 – ≤ *
References
References7
- https://git.kernel.org/stable/c/3c4771091ea8016c8601399078916f722dd8833b (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/f777792952d03bbaf8329fdfa99393a5a33e2640 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/9e719ae3abad60e245ce248ba3f08148f375a614 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/29a18d56bd64b95bd10bda4afda512558471382a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/62e007bdeb91c6879a4652c3426aef1cd9d2937b (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/60d62757df30b74bf397a2847a6db7385c6ee281 (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-38740 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-40929)Record last updated .