CVE-2024-49929
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-49929
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-49929.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-49929
- Downstream
- Related
- Published
- 2024-10-21T18:15:14Z
- Modified
- 2025-08-09T20:01:28Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: avoid NULL pointer dereference
iwlmvmtxskbsta() and iwlmvmtxmpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwlmvmstafrommac80211, which is dereferencing the ieee80211sta pointer. If sta is NULL, iwlmvmstafrommac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.
- References
-
- https://git.kernel.org/stable/c/557a6cd847645e667f3b362560bd7e7c09aac284
- https://git.kernel.org/stable/c/6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28
- https://git.kernel.org/stable/c/c0b4f5d94934c290479180868a32c15ba36a6d9e
- https://git.kernel.org/stable/c/cdbf51bfa4b0411820806777da36d93d49bc49a1
- https://git.kernel.org/stable/c/cbc6fc9cfcde151ff5eadaefdc6155f99579384f