PT-2025-9943 · Linux+5 · Linux Kernel+5

Publicado

2024-12-29

·

Atualizado

2025-11-12

·

CVE-2024-58062

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference issue has been resolved in the Linux kernel, specifically in the iwlwifi mvm module. The issue occurred when iterating over the links of a vif, where a check was needed to ensure the pointer's validity before dereferencing it. The for each vif active link function is used to perform this check.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALSA-2025:20518
ALSA-2025_12746
ALSA-2025_12752
ALSA-2025_12753
ALSA-2025_16880
ALSA-2025_18281
ALSA-2025_19102
ALSA-2025_19103
ALSA-2025_19409
ALSA-2025_20518
BDU:2025-02437
CVE-2024-58062
INFSA-2025_20518
RHSA-2025:20518
RHSA-2025_20518
SUSE-SU-2025:02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02254-1
SUSE-SU-2025_02307-1
SUSE-SU-2025_02333-1

Produtos afetados

Almalinux
Astra Linux
Linux Kernel
Red Hat
Rocky Linux
Suse