Is CVE-2024-20089 actively exploited?

CVE-2024-20089 has no public evidence of in-the-wild exploitation as of 2024-09-05.

What is the CVSS score for CVE-2024-20089?

CVE-2024-20089 has a CVSS score of 7.5 (HIGH severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

How do I patch CVE-2024-20089?

Patch guidance is available from linuxfoundation security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2024-20089.

Fix CVE-2024-20089 - HIGH linuxfoundation yocto

Q: Which products are affected by CVE-2024-20089?

6 products: linuxfoundation yocto, linuxfoundation yocto, linuxfoundation yocto, rdkcentral rdk-b, google android, and 1 more.

Description

In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08861558; Issue ID: MSV-1526.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: none
Integrity: none
Availability: high
Weaknesses: CWE-703 CWE-754 CWE-754

Metadata

Primary Vendor: LINUXFOUNDATION
Published: 9/2/2024
Last Modified: 9/5/2024
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

linuxfoundation : yoctolinuxfoundation : yoctolinuxfoundation : yoctordkcentral : rdk-bgoogle : androidgoogle : android

Remediation Guidance

Executive Summary

Cite this page

CVE-2024-20089. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2024-20089

View on NIST NVD

CVE-2024-20089 vulnerability