9.1

CVE-2024-35845: wifi: iwlwifi: dbg-tlv: ensure NUL termination

Modified
AliasesUBUNTU-CVE-2024-35845DEBIAN-CVE-2024-35845
Published 17-05-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-35845 is a critical (CVSS 9.1) vulnerability in debian debian_linux. EPSS estimates a 1.17% chance of exploitation in the next 30 days, higher than 67.4% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 9.1 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 1% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
9.1/10
010
Critical · v3.1 (CVE.org)
EPSS score
1.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 33 · Related 25
DLA-3842-1RHSA-2024:4211RHSA-2024:4352RHSA-2024:5363RHSA-2024:5364RHSA-2024:5365

Timeline

  1. 17-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

1.17%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.17% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu105 products
  • linux< 5.15.0-112.122 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1063.69 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ a9248de42464e546b624e3fc6a8b04b991af3591, < fabe2db7de32a881e437ee69db32e0de785a6209 | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < 96aa40761673da045a7774f874487cdb50c6a2f7 | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < 783d413f332a3ebec916664b366c28f58147f82c | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < fec14d1cdd92f340b9ba2bd220abf96f9609f2a9 | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < 71d4186d470e9cda7cd1a0921b4afda737c6f641 | ≥ a9248de42464e546b624e3fc6a8b04b991af3591, < ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea | 5.5
  • linux_kernel≥ 5.5, < 5.10.214 | ≥ 5.11, < 5.15.153 | ≥ 5.16, < 6.1.83 | ≥ 6.2, < 6.6.23 | ≥ 6.7, < 6.7.11 | ≥ 6.8, < 6.8.2

3 vendors · 109 products

References

28 links
Show all 28 references