CVE-2024-49929

MEDIUM EPSS 14.7%
Published Oct 21, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 21, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is dereferencing the ieee80211_sta pointer. If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
14.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 3

VendorProductVersionRange
linuxlinux_kernel* <6.6.55
linuxlinux_kernel*≥6.7  –  <6.10.14
linuxlinux_kernel*≥6.11  –  <6.11.3

References 6

  • git.kernel.org https://git.kernel.org/stable/c/557a6cd847645e667f3b362560bd7e7c09aac284
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0b4f5d94934c290479180868a32c15ba36a6d9e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cbc6fc9cfcde151ff5eadaefdc6155f99579384f
  • git.kernel.org https://git.kernel.org/stable/c/cdbf51bfa4b0411820806777da36d93d49bc49a1
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/557a6cd847645e667f3b362560bd7e7c09aac284
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0b4f5d94934c290479180868a32c15ba36a6d9e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/cdbf51bfa4b0411820806777da36d93d49bc49a1
    Patch