CVE-2024-35946

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35946
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif that weren't scanning. Fix this by using the actual scanning vif.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d Patch
https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 Patch
https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 Patch
https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d Patch
https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 Patch
https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Jan 2025, 15:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d - () https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d - Patch
References () https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 - () https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 - Patch
References () https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 - () https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 - Patch

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d - () https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d -
References () https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 - () https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2 -
References () https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 - () https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: rtw89: corrige el acceso al puntero null al cancelar el escaneo. Durante la cancelación del escaneo podríamos usar vif que no estaban escaneando. Solucione este problema utilizando el vif de escaneo real.

19 May 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 11:15

Updated : 2025-01-31 15:02

NVD link : CVE-2024-35946

Mitre link : CVE-2024-35946

CVE.ORG link : CVE-2024-35946

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference