High · published August 22, 2025
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
Preserve the error code if iwl_setup_deferred_work() fails. The current
code returns ERR_PTR(0) (which is NULL) on this path. I believe the
missing error code potentially leads to a use after free involving
debugfs.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.4.297, < 5.5 | 5.5 |
| linux/linux_kernel | ≥ 5.10.241, < 5.11 | 5.11 |
| linux/linux_kernel | ≥ 5.15.190, < 5.16 | 5.16 |
| linux/linux_kernel | ≥ 6.1.148, < 6.2 | 6.2 |
| linux/linux_kernel | ≥ 6.6.102, < 6.7 | 6.7 |
| linux/linux_kernel | ≥ 6.12.42, < 6.13 | 6.13 |