Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: set the cipher for secured NDP ranging The cipher pointer is not set, but is derefereced trying to set its content, which leads to a NULL pointer dereference. Fix it by pointing to the cipher parameter before dereferencing.
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0018
EPSS Percentile
7.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-476
Status
published
Products (8)
linux/Kernel
6.11.0 - 6.11.2linux
Linux/Linux
< 6.11
Linux/Linux
6.11
Linux/Linux
6.11.2 - 6.11.*
Linux/Linux
6.12
Linux/Linux
626be4bf99f6250cd66da5d311a72ad7455c5a64 - a949075d4bbf1ca83ccdeaa6ef4ac2ce7526c5f4
Linux/Linux
626be4bf99f6250cd66da5d311a72ad7455c5a64 - b3322a6d6aa9bc17b395c4b38d3b97578887aa8a
linux/linux_kernel
6.11 - 6.11.2
Published
Oct 21, 2024
Tracked Since
Feb 18, 2026