Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-35912
HistoryMay 19, 2024 - 8:35 a.m.

CVE-2024-35912 wifi: iwlwifi: mvm: rfi: fix potential response leaks

2024-05-1908:35:05
Linux
github.com
2
linux kernel
vulnerability
wifi
iwlwifi
mvm
rfi
fix potential response
command response
kmemdup

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: rfi: fix potential response leaks

If the rx payload length check fails, or if kmemdup() fails,
we still need to free the command response. Fix that.

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial