CVE-2024-36921

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36921
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f Patch
https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 Patch
https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f Patch
https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f Patch
https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 Patch
https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

01 Mar 2025, 02:33

Type Values Removed Values Added
CWE CWE-129
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f - () https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f - Patch
References () https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 - () https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 - Patch
References () https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f - () https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f - Patch

21 Nov 2024, 09:22

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: wifi: iwlwifi: mvm: proteger contra ID de STA no válido al eliminarlo Proteger contra ID de estación no válidos en iwl_mvm_mld_rm_sta_id ya que eso daría como resultado accesos a la matriz fuera de los límites. Esto evita problemas en caso de que el controlador entre en mal estado durante el manejo de errores.
References () https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f - () https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f -
References () https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 - () https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294 -
References () https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f - () https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f -

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-03-01 02:33

NVD link : CVE-2024-36921

Mitre link : CVE-2024-36921

CVE.ORG link : CVE-2024-36921

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-129

Improper Validation of Array Index