CVE-2024-36941
wifi: nl80211: don't free NULL coalescing rule
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a NULL pointer here.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.12
References 8
git.kernel.org
- stable/c/327382dc0f16b268950b96e0052595efd80f7b0a
- stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457
- stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307
- stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4
- stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f
- stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d
- stable/c/f92772a642485394db5c9a17bd0ee73fc6902383
- stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7