CVE-2024-48873: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: check return value of ieee80211probereqget() for RNR
The return value of ieee80211probereqget() might be NULL, so check it before using to avoid NULL pointer access.
Addresses-Coverity-ID: 1529805 ("Dereference null return value")
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48873?
CVE-2024-48873 is classified as a potential denial-of-service vulnerability due to NULL pointer access.
How do I fix CVE-2024-48873?
To mitigate CVE-2024-48873, ensure that you are using a patched version of the Linux kernel that includes the checks for ieee80211_probereq_get().
Which versions of the Linux kernel are affected by CVE-2024-48873?
CVE-2024-48873 affects Linux kernel versions from 6.4 up to, but not including, 6.12.5 and also versions up to 6.6.66.
What component of the Linux kernel is vulnerable in CVE-2024-48873?
The vulnerability in CVE-2024-48873 resides in the WiFi subsystem, specifically related to the ieee80211_probereq_get() function.
Is there a known exploit for CVE-2024-48873?
As of now, there are no publicly documented exploits specifically targeting CVE-2024-48873.