CVE-2024-36921: wifi: iwlwifi: mvm: guard against invalid STA ID on removal
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: guard against invalid STA ID on removal
Guard against invalid station IDs in iwlmvmmldrmstaid as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: guard against invalid STA ID on removal
The Linux kernel CVE team has assigned CVE-2024-36921 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053039-CVE-2024-36921-9f90@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36921?
CVE-2024-36921 has not been officially rated but it involves out-of-bounds access which can lead to serious security implications.
How do I fix CVE-2024-36921?
To fix CVE-2024-36921, update to kernel versions 6.6.31, 6.8.10, 6.9, or 6.12.12-1/6.12.13-1 based on your distribution.
What does CVE-2024-36921 affect?
CVE-2024-36921 affects the iwlwifi driver in the Linux kernel, allowing for invalid station ID handling on removal.
Is CVE-2024-36921 exploitable?
Yes, CVE-2024-36921 is potentially exploitable due to the out-of-bounds access that it allows.
What distributions are impacted by CVE-2024-36921?
CVE-2024-36921 impacts Red Hat and Debian distributions with specific versions of their kernel packages.