wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 5.5, 5.11, 5.16, 6.2, 6.6.160, and 1 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From ca980f1911a7144d451d1c31298ab8507c6bd88f · fixed in 5c432da1ee191e9f7830dd516456706063d7bec3; From 7dd6350307af6521b6240b295c93b7eec4daebe6 · fixed in f95598a133a905fd937354ad902773d05593b8b9; From c0e43c3f6c0a79381b468574c241065998412b7c · fixed in 991e2066f6009d3cb898413058c62dbcc92bd6d2; From 70a1b527eaea9430b1bd87de59f3b9f6bd225701 · fixed in 1d068272c21d886d06526454b68368100ba0a720; From 90a0d9f339960448a3acc1437a46730f975efd6a · fixed in cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6; From 5.4.297 · fixed in 5.5; From 5.10.241 · fixed in 5.11; From 5.15.190 · fixed in 5.16; From 6.1.148 · fixed in 6.2
- Linux Linux
From 6.6.102 · fixed in 6.6.160; From 6.12.42 · fixed in 6.12.114
- KernelLinux
From 6.6.102 · fixed in 6.6.160; From 6.12.42 · fixed in 6.12.114