PT-2024-27211 · Linux+8 · Linux Kernel+8
Published
2024-03-20
·
Updated
2026-05-26
·
CVE-2024-36921
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to the wifi component of the Linux kernel, specifically the iwlwifi driver. It involves guarding against invalid station IDs in the
iwl mvm mld rm sta id function to prevent out-of-bounds array accesses. This prevents issues that may occur when the driver gets into a bad state during error handling.Recommendations
Update to Linux kernel version 6.6.37 or later to resolve the issue.
As a temporary workaround, consider restricting access to the wifi component until a patch is available.
Exploit
Fix
DoS
Out of bounds Read
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Rocky Linux
Suse
Ubuntu