CVE-2024-5290

HIGH

7.8

CVSS Score

Published: August 7, 2024 at 08:14 AM UTC

Updated: June 17, 2026 at 08:15 AM UTC

3 products affected across 2 vendorsUbuntu LinuxWpa SupplicantWpa Supplicant

Using wpa_supplicant by Canonical Ltd.?

Get instant alerts when new vulnerabilities affect wpa_supplicant - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.7%

SSVC

PoC

Description

An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate privileges to the user that wpa_supplicant runs as (usually root). Membership in the netdev group or access to the dbus interface of wpa_supplicant allow an unprivileged user to specify an arbitrary path to a module to be loaded by the wpa_supplicant process; other escalation paths might exist.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Wpa Supplicant · Canonical

60%

2.1-0ubuntu1 ≤ v < 2.1-0ubuntu1.7+esm52.4-0ubuntu10 ≤ v < 2:2.6-15ubuntu2.8+esm12.4-0ubuntu3 ≤ v < 2.4-0ubuntu6.8+esm12:2.10-15 ≤ v < 2:2.10-21ubuntu0.12:2.9-1ubuntu2 ≤ v < 2:2.9-1ubuntu4.42:2.9.0-21build1 ≤ v < 2:2.10-6ubuntu2.12.1-0ubuntu1 2.4-0ubuntu10 2.4-0ubuntu3 2:2.10-15 2:2.9-1ubuntu2 2:2.9.0-21build1

Affected range stops below 2.1-0ubuntu1.7+esm5, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.4-0ubuntu6.8+esm1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.10-21ubuntu0.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.10-6ubuntu2.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.6-15ubuntu2.8+esm1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.9-1ubuntu4.4, so it looks safe — our inference, not a vendor statement

Wpa Supplicant · W1-fi

60%

Affected range stops below 2.1-0ubuntu1.7+esm5, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.4-0ubuntu6.8+esm1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.10-21ubuntu0.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.10-6ubuntu2.1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.6-15ubuntu2.8+esm1, so it looks safe — our inference, not a vendor statement

Affected range stops below 2:2.9-1ubuntu4.4, so it looks safe — our inference, not a vendor statement

canonical-ubuntu-linux (environment)

Ubuntu Linux · Canonicalrubygemsdevice

80%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://ubuntu.com/security/notices/USN-6945-1

References (3)

ExploitIssue Tracking

Source: [email protected]

https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2067613

ExploitThird Party Advisory

Source: [email protected]

https://snyk.io/blog/abusing-ubuntu-root-privilege-escalation/

Vendor Advisory

Source: [email protected]

https://ubuntu.com/security/notices/USN-6945-1

SSVC — Action Prioritization

SSVCPoCNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.8HIGH[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusANALYZED

CWE

CWE-427

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card