CVE-2024-49929

MEDIUM

Linux kernel - Null Pointer Dereference

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is dereferencing the ieee80211_sta pointer. If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 14.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-476
Status published
Products (17)
linux/Kernel 3.14.0 - 6.1.120linux
linux/Kernel 6.11.0 - 6.11.3linux
linux/Kernel 6.2.0 - 6.6.55linux
linux/Kernel 6.7.0 - 6.10.14linux
Linux/Linux < 3.14
Linux/Linux 3.14
Linux/Linux 5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 - 557a6cd847645e667f3b362560bd7e7c09aac284
Linux/Linux 5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 - 6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28
Linux/Linux 5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 - c0b4f5d94934c290479180868a32c15ba36a6d9e
Linux/Linux 5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 - cbc6fc9cfcde151ff5eadaefdc6155f99579384f
... and 7 more
Published Oct 21, 2024
Tracked Since Feb 18, 2026