CVE-2024-27434EPSS p21.7%

CVE-2024-27434CVE-2024-27434

linux / linux_kernel

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK with cipher = TKIP and MFP which is of course not possible.

Scoring

CVSS 7.1 ()
VectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS0.29% probability of exploitation · percentile 21.7% · 2026-08-05T12:04:55Z
Last modified2026-08-04
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.