CVE-2024-35937

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35937
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more careful and check if the subframe header can even be present.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 Patch
https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 Patch
https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc Patch
https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647e Patch
https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 Patch
https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 Patch
https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Mar 2025, 12:53

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 - () https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 - Patch
References () https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 - () https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 - Patch
References () https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc - () https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc - Patch
References () https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647e - () https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647e - Patch
CWE CWE-125

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 - () https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544 -
References () https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 - () https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9 -
References () https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc - () https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7cc -

29 Aug 2024, 17:15

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: wifi: cfg80211: comprueba más detenidamente el formato A-MSDU Si parece que hay otra subtrama en el A-MSDU pero el encabezado no está completamente ahí, podemos terminar leyendo datos fuera de límites, sólo para descartarlo más tarde. Haga esto un poco más cuidadoso y verifique si el encabezado del subtrama puede estar presente.
References
  • () https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647e -

19 May 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 11:15

Updated : 2025-03-06 12:53

NVD link : CVE-2024-35937

Mitre link : CVE-2024-35937

CVE.ORG link : CVE-2024-35937

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read