Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-36921
HistoryMay 30, 2024 - 3:29 p.m.

CVE-2024-36921 wifi: iwlwifi: mvm: guard against invalid STA ID on removal

2024-05-3015:29:15
Linux
github.com
1
linux kernel
iwlwifi driver
vulnerability
guard against
out-of-bounds array accesses
error handling

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: guard against invalid STA ID on removal

Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would
result in out-of-bounds array accesses. This prevents issues should the
driver get into a bad state during error handling.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial