• lucb1e 2 years ago

    For those not familiar with every CVE ID, that's a WiFi driver bug for a "chipset commonly used on embedded platforms that support Wifi6 (802.11ax) including Ubiquiti, Xiaomi, and Netgear devices"

    • supernetworks_ 2 years ago

      Luckily recent openwrt releases, mainline Linux don’t use the proprietary driver that powers this daemon nor the vulnerable daemon. Since 2023 except for xiaomi routers they shouldn’t be affected I want to add

    • jmholla 2 years ago

      From the other thread: Ubiquiti devices are not impacted by this. [0][1]

      [0]: https://community.ui.com/questions/CVE-2024-20017/b3f1a425-d...

      [1]: https://news.ycombinator.com/item?id=41610266

      • dang 2 years ago

        Recent and related:

        Critical Exploit in MediaTek Wi-Fi Chipsets: Zero-Click Vulnerability - https://news.ycombinator.com/item?id=41605680 - Sept 2024 (97 comments)

        • cynicalsecurity 2 years ago

          I would have really chuckled if there were 2 exploits.