CVE-2024-5290
Fixed in a distro release EPSS <1%CVSS 8.8
An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.
Products: Canonical Ltd. wpa_supplicant, w1.fi wpa_supplicant
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | wpa_supplicant | 2.11-r1 |
| Debian 11 | wpa | 2:2.9.0-21+deb11u2 |
| Debian 12 | wpa | 2:2.10-12+deb12u2 |
| Debian 13 | wpa | 2:2.10-22 |
| Debian 14 | wpa | 2:2.10-22 |
| Ubuntu 14.04 LTS | wpa | 2.1-0ubuntu1.7+esm5 |
| Ubuntu 16.04 LTS | wpa | 2.4-0ubuntu6.8+esm1 |
| Ubuntu 18.04 LTS | wpa | 2:2.6-15ubuntu2.8+esm1 |
| Ubuntu 20.04 LTS | wpa | 2:2.9-1ubuntu4.4 |
| Ubuntu 22.04 LTS | wpa | 2:2.10-6ubuntu2.1 |
| Ubuntu 24.04 LTS | wpa | 2:2.10-21ubuntu0.1 |