Riskcovery

CVE-2024-35912

wifi: iwlwifi: mvm: rfi: fix potential response leaks

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: rfi: fix potential response leaks

If the rx payload length check fails, or if kmemdup() fails, we still need to free the command response. Fix that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 21254908cbe995a3982a23da32c30d1b43467043 to before 28db0ae86cb91a4ab0e855cff779daead936b7d5Affected
  • 21254908cbe995a3982a23da32c30d1b43467043 to before 99a75d75007421d8e08ba139e24f77395cd08f62Affected
  • 21254908cbe995a3982a23da32c30d1b43467043 to before c0a40f2f8eba07416f695ffe2011bf3f8b0b6dc8Affected
  • 21254908cbe995a3982a23da32c30d1b43467043 to before f7f0e784894dfcb265f0f9fa499103b0ca7eabdeAffected
  • 21254908cbe995a3982a23da32c30d1b43467043 to before 06a093807eb7b5c5b29b6cff49f8174a4e702341Affected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.15.154 through 5.15.*Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.