CVE-2024-49929

Updated: 2024-12-14 21:28:00.635508

Description:

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is dereferencing the ieee80211_sta pointer. If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2024-11-05 04:30:12
AlmaLinux 9.2 FIPS kernel 5.14.0 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CentOS Stream 8 ELS kernel 4.18.0 5.5 MEDIUM Ignored 2024-11-05 04:30:09
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-11-05 04:30:12
CloudLinux 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2024-11-05 04:30:09
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Ignored 2024-11-05 04:30:09
Total: 14