PT-2024-3464 · Linux+7 · Linux Kernel+7

Guy Kaplan · Published 2024-01-26 · Updated 2025-09-29 · CVE-2024-26694

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a double-free bug in the iwlwifi driver. The storage for the TLV PC register data was not handled like other storage in the drv->fw area, which is cleared at the end of deallocation. This could lead to a double-free bug if a file fails to load after being parsed and another free occurs later. The bug was fixed by adding a missing NULL assignment. The vulnerability could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALSA-2024:3618

ALSA-2024:3627

ALSA-2025_16880

BDU:2024-03752

CESA-2024_3618

CESA-2024_3627

CVE-2024-26694

INFSA-2024_3618

INFSA-2024_3627

RHSA-2024:3618

RHSA-2024:3627

RHSA-2024_3618

RHSA-2024_3627

RLSA-2024:3618

RLSA-2024:3627

USN-6895-1

USN-6895-2

USN-6895-3

USN-6895-4

USN-6900-1

Affected Products

Almalinux

Centos

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Ubuntu

References · 320

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26694.json · Exploit
• https://ubuntu.com/security/CVE-2024-26733 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26643 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26698 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26920 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26601 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26824 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26693 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6895-3 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03752 · Security Note
• https://ubuntu.com/security/CVE-2024-26602 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26838 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52643 · Vendor Advisory