CVE-2024-36921

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.

CVSS Metrics

• v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.02%• Percentile: 4%

Techniques & Countermeasures

• CWE-129•Improper Validation of Array Index

  The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Affected Systems

• linux•linux

  ≥ 006c152ac9e56ac7871efa995854c3ff8cf6915a, < 94f80a8ec15e238b78521f20f8afaed60521a294 | ≥ 006c152ac9e56ac7871efa995854c3ff8cf6915a, < fab21d220017daa5fd8a3d788ff25ccfecfaae2f | ≥ 006c152ac9e56ac7871efa995854c3ff8cf6915a, < 17f64517bf5c26af56b6c3566273aad6646c3c4f | 6.4

• linux•linux_kernel

  < 6.6.31 | ≥ 6.7, < 6.8.10 | 6.9:rc1

References (3)

• https://git.kernel.org/stable/c/94f80a8ec15e238b78521f20f8afaed60521a294
• https://git.kernel.org/stable/c/fab21d220017daa5fd8a3d788ff25ccfecfaae2f
• https://git.kernel.org/stable/c/17f64517bf5c26af56b6c3566273aad6646c3c4f