CVE-2024-36941

Sažetak

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a NULL pointer here.

Reference

https://git.kernel.org/stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d
https://git.kernel.org/stable/c/327382dc0f16b268950b96e0052595efd80f7b0a
https://git.kernel.org/stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307
https://git.kernel.org/stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7
https://git.kernel.org/stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457
https://git.kernel.org/stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4
https://git.kernel.org/stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f
https://git.kernel.org/stable/c/f92772a642485394db5c9a17bd0ee73fc6902383
https://git.kernel.org/stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d
https://git.kernel.org/stable/c/327382dc0f16b268950b96e0052595efd80f7b0a
https://git.kernel.org/stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307
https://git.kernel.org/stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7
https://git.kernel.org/stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457
https://git.kernel.org/stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4
https://git.kernel.org/stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f
https://git.kernel.org/stable/c/f92772a642485394db5c9a17bd0ee73fc6902383
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

CVSS

Base:	5.5
Impact:	3.6
Exploitability:	1.8

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	LOW

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	NONE	HIGH

CVSS vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Zadnje važnije ažuriranje

15-01-2025 - 18:37

Objavljeno

30-05-2024 - 16:15