ByteOS Network

CVE Vulnerability Details :

CVE-2024-36941

PUBLISHED

More Info Official Page

Assigner-Linux

Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published At-30 May, 2024 | 15:29

Updated At-20 May, 2025 | 14:17

▼CVE Numbering Authority (CNA)

wifi: nl80211: don't free NULL coalescing rule

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a NULL pointer here.

Affected Products

Vendor

Linux Kernel Organization, Inc

Product

Linux

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

net/wireless/nl80211.c

Default Status

unaffected

Versions

Affected

From be29b99a9b51b0338eea3c66a58de53bbd01de24 before 327382dc0f16b268950b96e0052595efd80f7b0a (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before 97792d0611ae2e6fe3ccefb0a94a1d802317c457 (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before 5a730a161ac2290d46d49be76b2b1aee8d2eb307 (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before ad12c74e953b68ad85c78adc6408ed8435c64af4 (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before b0db4caa10f2e4e811cf88744fbf0d074b67ec1f (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before 244822c09b4f9aedfb5977f03c0deeb39da8ec7d (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before f92772a642485394db5c9a17bd0ee73fc6902383 (git)
From be29b99a9b51b0338eea3c66a58de53bbd01de24 before 801ea33ae82d6a9d954074fbcf8ea9d18f1543a7 (git)

Vendor

Linux Kernel Organization, Inc

Product

Linux

Repo

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Program Files

net/wireless/nl80211.c

Default Status

affected

Versions

Affected

3.12

Unaffected

From 0 before 3.12 (semver)
From 4.19.314 through 4.19.* (semver)
From 5.4.276 through 5.4.* (semver)
From 5.10.217 through 5.10.* (semver)
From 5.15.159 through 5.15.* (semver)
From 6.1.91 through 6.1.* (semver)
From 6.6.31 through 6.6.* (semver)
From 6.8.10 through 6.8.* (semver)
From 6.9 through * (original_commit_for_fix)

References

Hyperlink	Resource
https://git.kernel.org/stable/c/327382dc0f16b268950b96e0052595efd80f7b0a	N/A
https://git.kernel.org/stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457	N/A
https://git.kernel.org/stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307	N/A
https://git.kernel.org/stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4	N/A
https://git.kernel.org/stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f	N/A
https://git.kernel.org/stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d	N/A
https://git.kernel.org/stable/c/f92772a642485394db5c9a17bd0ee73fc6902383	N/A
https://git.kernel.org/stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7	N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-476	CWE-476 NULL Pointer Dereference

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://git.kernel.org/stable/c/327382dc0f16b268950b96e0052595efd80f7b0a	x_transferred
https://git.kernel.org/stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457	x_transferred
https://git.kernel.org/stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307	x_transferred
https://git.kernel.org/stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4	x_transferred
https://git.kernel.org/stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f	x_transferred
https://git.kernel.org/stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d	x_transferred
https://git.kernel.org/stable/c/f92772a642485394db5c9a17bd0ee73fc6902383	x_transferred
https://git.kernel.org/stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7	x_transferred
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html	x_transferred
https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html	x_transferred

Affected Products

Affected

Affected

Unaffected

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References