CVE-2024-26610

wifi: iwlwifi: fix a memory corruption

State: Published
Severity: 7.8 High
Published: Feb 29, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: fix a memory corruption

iwl_fw_ini_trigger_tlv::data is a pointer to a __le32, which means that if we copy to iwl_fw_ini_trigger_tlv::data + offset while offset is in bytes, we'll write past the buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 05dd9facfb9a1e056752c0901c6e86416037d15aAffected cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 99a23462fe1a6f709f0fda3ebbe8b6b193ac75bdAffected cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before aa2cc9363926991ba74411e3aa0a0ea82c1ffe32Affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 870171899d75d43e3d14360f3a4850e90a9c289bAffected cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before f32a81999d0b8e5ce60afb5f6a3dd7241c17dd67Affected cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before cf4a0d840ecc72fcf16198d5e9c505ab7d5a5e4dAffected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.76 through 6.1.Not affected 6.6.15 through 6.6.Not affected 6.7.3 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 05dd9facfb9a1e056752c0901c6e86416037d15aAffected
cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 99a23462fe1a6f709f0fda3ebbe8b6b193ac75bdAffected
cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before aa2cc9363926991ba74411e3aa0a0ea82c1ffe32Affected
cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before 870171899d75d43e3d14360f3a4850e90a9c289bAffected
cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before f32a81999d0b8e5ce60afb5f6a3dd7241c17dd67Affected
cf29c5b66b9f83939367d90679eb68cdfa2f0356 to before cf4a0d840ecc72fcf16198d5e9c505ab7d5a5e4dAffected

LinuxLinux

5.5Affected
before 5.5Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.76 through 6.1.*Not affected
6.6.15 through 6.6.*Not affected
6.7.3 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.