Riskcovery

CVE-2024-36941

wifi: nl80211: don't free NULL coalescing rule

State
Published
Severity
5.5 Medium
Published
May 30, 2024
Updated
May 11, 2026
Reserved
May 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: nl80211: don't free NULL coalescing rule

If the parsing fails, we can dereference a NULL pointer here.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before 327382dc0f16b268950b96e0052595efd80f7b0aAffected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before 97792d0611ae2e6fe3ccefb0a94a1d802317c457Affected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before 5a730a161ac2290d46d49be76b2b1aee8d2eb307Affected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before ad12c74e953b68ad85c78adc6408ed8435c64af4Affected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before b0db4caa10f2e4e811cf88744fbf0d074b67ec1fAffected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before 244822c09b4f9aedfb5977f03c0deeb39da8ec7dAffected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before f92772a642485394db5c9a17bd0ee73fc6902383Affected
  • be29b99a9b51b0338eea3c66a58de53bbd01de24 to before 801ea33ae82d6a9d954074fbcf8ea9d18f1543a7Affected
LinuxLinux
  • 3.12Affected
  • before 3.12Not affected
  • 4.19.314 through 4.19.*Not affected
  • 5.4.276 through 5.4.*Not affected
  • 5.10.217 through 5.10.*Not affected
  • 5.15.159 through 5.15.*Not affected
  • 6.1.91 through 6.1.*Not affected
  • 6.6.31 through 6.6.*Not affected
  • 6.8.10 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.