CVE-2024-57997CWE-908

CVE-2024-57997

High · published February 27, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: wcn36xx: fix channel survey memory allocation size

KASAN reported a memory allocation issue in wcn->chan_survey

due to incorrect size calculation.

This commit uses kcalloc to allocate memory for wcn->chan_survey,

ensuring proper initialization and preventing the use of uninitialized

values when there are no frames on the channel.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00330 · 24.9th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2025-02-27T07:15Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 5.18, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.766.6.76
linux/linux_kernel≥ 6.7, < 6.12.136.12.13
linux/linux_kernel≥ 6.13, < 6.13.26.13.2
References (6)
https://git.kernel.org/stable/c/34cd2817708aec51ef1a6c007e0d6d5342a025d7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6200d947f050efdba4090dfefd8a01981363d954 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/64c4dcaeac1dc1030e47883b04a617ca9a4f164e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ae68efdff7a7a42ab251cac79d8713de6f0dbaa0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e95f9c408ff8311f75eeabc8acf34a66670d8815 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 27 FEB 02:07Z
    wifi: wcn36xx: fix channel survey memory allocation size
    cvelistv5