Riskcovery

CVE-2024-35845

wifi: iwlwifi: dbg-tlv: ensure NUL termination

State
Published
Severity
9.1 Critical
Published
May 17, 2024
Updated
Oct 15, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: dbg-tlv: ensure NUL termination

The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.

Scores

CVSSScoreVectorSource
3.19.1 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

  • CWE-134 Use of Externally-Controlled Format String

Affected Products

ProductVersions
LinuxLinux
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before fabe2db7de32a881e437ee69db32e0de785a6209Affected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before 96aa40761673da045a7774f874487cdb50c6a2f7Affected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before c855a1a5b7e3de57e6b1b29563113d5e3bfdb89aAffected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before 783d413f332a3ebec916664b366c28f58147f82cAffected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before fec14d1cdd92f340b9ba2bd220abf96f9609f2a9Affected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before 71d4186d470e9cda7cd1a0921b4afda737c6f641Affected
  • a9248de42464e546b624e3fc6a8b04b991af3591 to before ea1d166fae14e05d49ffb0ea9fcd4658f8d3dceaAffected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.214 through 5.10.*Not affected
  • 5.15.153 through 5.15.*Not affected
  • 6.1.83 through 6.1.*Not affected
  • 6.6.23 through 6.6.*Not affected
  • 6.7.11 through 6.7.*Not affected
  • 6.8.2 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.