CVE-2024-27434

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't set the MFP flag for the GTK The firmware doesn't need the MFP flag for the GTK, it can even make the firmware crash. in case the AP is configured with: group cipher TKIP and MFPC. We would send the GTK with cipher = TKIP and MFP which is of course not possible.

• https://git.kernel.org/stable/c/40405cbb20eb6541c603e7b3d54ade0a7be9d715Patch
• https://git.kernel.org/stable/c/60f6d5fc84a9fd26528a24d8a267fc6a6698b628Patch
• https://git.kernel.org/stable/c/b4f1b0b3b91762edd19bf9d3b2e4c3a0740501f8Patch
• https://git.kernel.org/stable/c/e35f316bce9e5733c9826120c1838f4c447b2c4cPatch
• https://git.kernel.org/stable/c/40405cbb20eb6541c603e7b3d54ade0a7be9d715Patch
• https://git.kernel.org/stable/c/60f6d5fc84a9fd26528a24d8a267fc6a6698b628Patch
• https://git.kernel.org/stable/c/b4f1b0b3b91762edd19bf9d3b2e4c3a0740501f8Patch
• https://git.kernel.org/stable/c/e35f316bce9e5733c9826120c1838f4c447b2c4cPatch

Published

May 17, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27429Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-2743An issue was discovered in GitLab-EE starting with version 1…9.1
• CVE-2024-27430Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-27431In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27432In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27433In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-27435In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27436In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27437In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-27438Download of Code Without Integrity Check vulnerability in Ap…9.8
• CVE-2024-27439An error in the evaluation of the fetch metadata headers cou…6.5
• CVE-2024-2744The NextGEN Gallery WordPress plugin before 3.59.1 does not…4.3