In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: fix double-free bug
The storage for the TLV PC register data wasn't done like all
the other storage in the drv->fw area, which is cleared at the
end of deallocation. Therefore, the freeing must also be done
differently, explicitly NULL'ing it out after the free, since
otherwise there's a nasty double-free bug here if a file fails
to load after this has been parsed, and we get another free
later (e.g. because no other file exists.) Fix that by adding
the missing NULL assignment.
References
Configurations
Configuration 1 (hide)
|
History
07 Jan 2025, 20:53
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | CWE-415 | |
| References | () https://git.kernel.org/stable/c/353d321f63f7dbfc9ef58498cc732c9fe886a596 - Patch | |
| References | () https://git.kernel.org/stable/c/ab9d4bb9a1892439b3123fc52b19e32b9cdf80ad - Patch | |
| References | () https://git.kernel.org/stable/c/d24eb9a27bea8fe5237fa71be274391d9d51eff2 - Patch |
Information
Published : 2024-04-03 15:15
Updated : 2025-01-07 20:53
NVD link : CVE-2024-26694
Mitre link : CVE-2024-26694
CVE.ORG link : CVE-2024-26694
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-415
Double Free