CVE-2024-58064

wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()

State: Published
Severity: 5.5 Medium
Published: Mar 6, 2025
Updated: May 11, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap()

kunit_kzalloc() may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	45d43937a44c806b8649323b8f5d9f42ae838b0e to before 886271409603956edd09df229dde7442c410a872Affected 45d43937a44c806b8649323b8f5d9f42ae838b0e to before 0d17d81143f5aa56ee87e60bb1000a2372a0ada8Affected 45d43937a44c806b8649323b8f5d9f42ae838b0e to before 13c4f7714c6a1ecf748a2f22099447c14fe6ed8cAffected
LinuxLinux	6.9Affected before 6.9Not affected 6.12.13 through 6.12.Not affected 6.13.2 through 6.13.Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.