U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-49929

Change History

New CVE Received from kernel.org 10/21/2024 2:15:14 PM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: avoid NULL pointer dereference

iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta
pointer is not NULL.
It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is
dereferencing the ieee80211_sta pointer.
If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL
pointer.
Fix this by checking the sta pointer before retrieving the mvmsta
from it. If sta is not NULL, then mvmsta isn't either.
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/557a6cd847645e667f3b362560bd7e7c09aac284 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/c0b4f5d94934c290479180868a32c15ba36a6d9e [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/cdbf51bfa4b0411820806777da36d93d49bc49a1 [No types assigned]