CVE-2024-58062: wifi: iwlwifi: mvm: avoid NULL pointer dereference
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: avoid NULL pointer dereference
When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before dereferncing it. Use foreachvifactivelink that also does the check.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58062?
The severity of CVE-2024-58062 is classified as moderate, as it involves a potential NULL pointer dereference in the Linux kernel.
How do I fix CVE-2024-58062?
To fix CVE-2024-58062, update to the latest version of the Linux kernel where this vulnerability has been addressed.
What software is affected by CVE-2024-58062?
CVE-2024-58062 affects Linux Kernel versions that include the iwlwifi driver for wireless networking.
What are the potential impacts of CVE-2024-58062?
The potential impacts of CVE-2024-58062 include system crashes or instability due to a NULL pointer dereference.
Is CVE-2024-58062 being actively exploited?
As of now, there are no public reports indicating that CVE-2024-58062 is being actively exploited in the wild.