Riskcovery

CVE-2024-58062

wifi: iwlwifi: mvm: avoid NULL pointer dereference

State
Published
Severity
5.5 Medium
Published
Mar 6, 2025
Updated
May 11, 2026
Reserved
Mar 6, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: avoid NULL pointer dereference

When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before dereferncing it. Use for_each_vif_active_link that also does the check.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 2b7ee1a10a72ef8f3df621133ac04e80e8214037 to before fbb563ad5032a07ac83c746ce5c8de5f25b5ffd0Affected
  • 2b7ee1a10a72ef8f3df621133ac04e80e8214037 to before 7f6fb4b7611eb6371c493c42fefad84a1742bcbbAffected
  • 2b7ee1a10a72ef8f3df621133ac04e80e8214037 to before cf704a7624f99eb2ffca1a16c69183e85544a613Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.13 through 6.12.*Not affected
  • 6.13.2 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.