CVE-2024-57997

wifi: wcn36xx: fix channel survey memory allocation size

State: Published
Severity: 8.8 High
Published: Feb 27, 2025
Updated: Aug 5, 2026
Reserved: Feb 27, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: wcn36xx: fix channel survey memory allocation size

KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan_survey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
LinuxLinux	29696e0aa413b9d56558731aae3806d7cff48d36 to before ae68efdff7a7a42ab251cac79d8713de6f0dbaa0Affected 29696e0aa413b9d56558731aae3806d7cff48d36 to before e95f9c408ff8311f75eeabc8acf34a66670d8815Affected 29696e0aa413b9d56558731aae3806d7cff48d36 to before 64c4dcaeac1dc1030e47883b04a617ca9a4f164eAffected 29696e0aa413b9d56558731aae3806d7cff48d36 to before 34cd2817708aec51ef1a6c007e0d6d5342a025d7Affected 29696e0aa413b9d56558731aae3806d7cff48d36 to before 6200d947f050efdba4090dfefd8a01981363d954Affected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.129 through 6.1.Not affected 6.6.76 through 6.6.Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

29696e0aa413b9d56558731aae3806d7cff48d36 to before ae68efdff7a7a42ab251cac79d8713de6f0dbaa0Affected
29696e0aa413b9d56558731aae3806d7cff48d36 to before e95f9c408ff8311f75eeabc8acf34a66670d8815Affected
29696e0aa413b9d56558731aae3806d7cff48d36 to before 64c4dcaeac1dc1030e47883b04a617ca9a4f164eAffected
29696e0aa413b9d56558731aae3806d7cff48d36 to before 34cd2817708aec51ef1a6c007e0d6d5342a025d7Affected
29696e0aa413b9d56558731aae3806d7cff48d36 to before 6200d947f050efdba4090dfefd8a01981363d954Affected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.129 through 6.1.*Not affected
6.6.76 through 6.6.*Not affected
6.12.13 through 6.12.*Not affected
6.13.2 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.