PT-2024-32175 · Linux+5 · Linux Kernel+5
Marcin Ślusarz
·
Published
2024-05-28
·
Updated
2026-03-14
·
CVE-2024-46760
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to a NULL pointer dereference in the
rtw rx fill rx status function on the hw object and/or its fields. This occurs because the initialization routine can start getting USB replies before rtw dev is fully set up. The stack trace includes functions such as rtw rx fill rx status, rtw8821c query rx desc, rtw usb rx handler, and others. The problem can be fixed by moving the first usb submit urb after everything is set up.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
RCE
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu