CVE-2024-46825: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: use IWLFWCHECK for link ID check
The lookup function iwlmvmrcufwlinkidtolinkconf() is normally called with input from the firmware, so it should use IWLFWCHECK() instead of WARNON().
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46825?
CVE-2024-46825 has been classified with a severity rating of medium due to potential issues with link ID checks in the Linux kernel.
How do I fix CVE-2024-46825?
To fix CVE-2024-46825, users should upgrade to Linux kernel versions 6.12.11-1 or 6.12.12-1 or ensure their systems are patched with the latest updates.
Which Linux kernel versions are affected by CVE-2024-46825?
CVE-2024-46825 affects Linux kernel versions from 6.6 to 6.10 and certain versions of 5.10 and 6.1 on Debian.
What components of the Linux kernel are impacted by CVE-2024-46825?
CVE-2024-46825 impacts the iwlwifi driver, specifically in its handling of link ID checks.
Is there a workaround for CVE-2024-46825?
There is no documented workaround for CVE-2024-46825; updating the kernel remains the best solution.