CVE-2024-53059

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

State: Published
Severity: 7.1 High
Published: Nov 19, 2024
Updated: Oct 15, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

1. The size of the response packet is not validated. 2. The response buffer is not freed.

Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9c98ee7ea463a838235e7a0e35851b38476364f2Affected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 45a628911d3c68e024eed337054a0452b064f450Affected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3f45d590ccbae6dfd6faef54efe74c30bd85d3daAffected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 64d63557ded6ff3ce72b18ab87a6c4b1b652161cAffected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3eb986c64c6bfb721950f9666a3b723cf65d043fAffected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9480c3045f302f43f9910d2d556d6cf5a62c1822Affected f130bb75d8817c560b48c4d1a0e5279968a0859d to before 07a6e3b78a65f4b2796a8d0d4adb1a15a81edeadAffected
LinuxLinux	5.1Affected before 5.1Not affected 5.4.285 through 5.4.Not affected 5.10.229 through 5.10.Not affected 5.15.171 through 5.15.Not affected 6.1.116 through 6.1.Not affected 6.6.60 through 6.6.Not affected 6.11.7 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9c98ee7ea463a838235e7a0e35851b38476364f2Affected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 45a628911d3c68e024eed337054a0452b064f450Affected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3f45d590ccbae6dfd6faef54efe74c30bd85d3daAffected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 64d63557ded6ff3ce72b18ab87a6c4b1b652161cAffected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 3eb986c64c6bfb721950f9666a3b723cf65d043fAffected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 9480c3045f302f43f9910d2d556d6cf5a62c1822Affected
f130bb75d8817c560b48c4d1a0e5279968a0859d to before 07a6e3b78a65f4b2796a8d0d4adb1a15a81edeadAffected

LinuxLinux

5.1Affected
before 5.1Not affected
5.4.285 through 5.4.*Not affected
5.10.229 through 5.10.*Not affected
5.15.171 through 5.15.*Not affected
6.1.116 through 6.1.*Not affected
6.6.60 through 6.6.*Not affected
6.11.7 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.