CVE-2024-36921

HIGH

Linux Kernel - Out-of-Bounds Array Access in iwl_mvm_mld_rm_sta_id

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294

Patch

https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f

Patch

https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f

Scores

CVSS v3 7.8

EPSS 0.0024

EPSS Percentile 14.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-129

Status published

Products (12)

linux/Kernel 6.4.0 - 6.6.31linux

linux/Kernel 6.7.0 - 6.8.10linux

Linux/Linux < 6.4

Linux/Linux 006c152ac9e56ac7871efa995854c3ff8cf6915a - 17f64517bf5c26af56b6c3566273aad6646c3c4f

Linux/Linux 006c152ac9e56ac7871efa995854c3ff8cf6915a - 94f80a8ec15e238b78521f20f8afaed60521a294

Linux/Linux 006c152ac9e56ac7871efa995854c3ff8cf6915a - fab21d220017daa5fd8a3d788ff25ccfecfaae2f

Linux/Linux 6.4

Linux/Linux 6.6.31 - 6.6.*

Linux/Linux 6.8.10 - 6.8.*

Linux/Linux 6.9

... and 2 more

Published May 30, 2024

Tracked Since Feb 18, 2026