CVE-2024-57997: wifi: wcn36xx: fix channel survey memory allocation size
In the Linux kernel, the following vulnerability has been resolved:
wifi: wcn36xx: fix channel survey memory allocation size
KASAN reported a memory allocation issue in wcn->chansurvey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chansurvey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57997?
CVE-2024-57997 has been identified as a memory allocation vulnerability in the Linux kernel affecting the wcn36xx Wi-Fi driver.
What systems are affected by CVE-2024-57997?
CVE-2024-57997 affects specific versions of the Linux kernel ranging from 5.18 to 6.12.13, including multiple sub-versions.
How do I fix CVE-2024-57997?
To fix CVE-2024-57997, you should upgrade to the latest version of the Linux kernel that addresses this vulnerability.
What type of issue does CVE-2024-57997 represent?
CVE-2024-57997 represents a memory allocation issue due to incorrect size calculation in the wcn36xx driver.
Is CVE-2024-57997 a critical vulnerability?
While the specific severity rating may vary, CVE-2024-57997 is important to address due to its implications for memory management and system stability.