CVE-2024-43842: wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: Fix array index mistake in rtw89stainfogetiter()
In rtw89stainfogetiter() 'status->hegi' is compared to array size. But then 'rate->hegi' is used as array index instead of 'status->hegi'. This can lead to go beyond array boundaries in case of 'rate->hegi' is not equal to 'status->hegi' and is bigger than array size. Looks like "copy-paste" mistake.
Fix this mistake by replacing 'rate->hegi' with 'status->hegi'.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43842?
CVE-2024-43842 has a severity rating that needs to be assessed based on the specific context and impact within affected systems.
How do I fix CVE-2024-43842?
To fix CVE-2024-43842, update the Linux kernel to one of the versions that contain the fix such as 5.10.223-1, 5.10.226-1, 6.1.123-1, or later versions listed in the remediation.
Which versions of the Linux kernel are affected by CVE-2024-43842?
CVE-2024-43842 affects several earlier versions of the Linux kernel, specifically those before the patched versions mentioned in the remediation.
Is CVE-2024-43842 a critical vulnerability?
The criticality of CVE-2024-43842 should be determined based on its exploitability and impact on organizational systems.
What components are directly related to CVE-2024-43842?
CVE-2024-43842 relates directly to the rtw89 driver in the Linux kernel, specifically in the function rtw89_sta_info_get_iter().