Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42136.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-42136
Upstream
Published
2024-05-19T09:15:11Z
Modified
2026-04-01T05:14:29.558641Z
Summary
CVE-2024-35912 affecting package hyperv-daemons for versions less than 5.15.158.1-1
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: rfi: fix potential response leaks

If the rx payload length check fails, or if kmemdup() fails, we still need to free the command response. Fix that.

References

Affected packages

Azure Linux:2 / hyperv-daemons

Package

Name
hyperv-daemons
Purl
pkg:rpm/azure-linux/hyperv-daemons

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.158.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42136.json"