CVE-2024-49929

wifi: iwlwifi: mvm: avoid NULL pointer dereference

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: avoid NULL pointer dereference

iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta

pointer is not NULL.

It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is

dereferencing the ieee80211_sta pointer.

If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL

pointer.

Fix this by checking the sta pointer before retrieving the mvmsta

from it. If sta is not NULL, then mvmsta isn't either.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00238 · 14.0th percentile
Published
2024-10-21T18:01Z
EPSS history
Timeline
  • 21 OCT 18:01Z
    wifi: iwlwifi: mvm: avoid NULL pointer dereference
    cvelistv5