Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-26694
HistoryApr 03, 2024 - 3:15 p.m.

CVE-2024-26694

2024-04-0315:15:52
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
1
linux kernel
wifi
iwlwifi
double-free bug
cve-2024-26694

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: fix double-free bug

The storage for the TLV PC register data wasn’t done like all
the other storage in the drv->fw area, which is cleared at the
end of deallocation. Therefore, the freeing must also be done
differently, explicitly NULL’ing it out after the free, since
otherwise there’s a nasty double-free bug here if a file fails
to load after this has been parsed, and we get another free
later (e.g. because no other file exists.) Fix that by adding
the missing NULL assignment.

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%