Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-35845

wifi: iwlwifi: dbg-tlv: ensure NUL termination

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.214, 5.15.153, 6.1.83, 6.6.23, 6.7.11, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in fabe2db7de32a881e437ee69db32e0de785a6209; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in 96aa40761673da045a7774f874487cdb50c6a2f7; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in 783d413f332a3ebec916664b366c28f58147f82c; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in fec14d1cdd92f340b9ba2bd220abf96f9609f2a9; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in 71d4186d470e9cda7cd1a0921b4afda737c6f641; From a9248de42464e546b624e3fc6a8b04b991af3591 · fixed in ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea

  • Linux Linux

    5.5

  • KernelLinux

    From 5.5.0 · fixed in 5.10.214; From 5.11.0 · fixed in 5.15.153; From 5.16.0 · fixed in 6.1.83; From 6.2.0 · fixed in 6.6.23; From 6.7.0 · fixed in 6.7.11; From 6.8.0 · fixed in 6.8.2

References 7

git.kernel.org