CVE-2024-36941

medium

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a NULL pointer here.

References

https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html

https://git.kernel.org/stable/c/f92772a642485394db5c9a17bd0ee73fc6902383

https://git.kernel.org/stable/c/b0db4caa10f2e4e811cf88744fbf0d074b67ec1f

https://git.kernel.org/stable/c/ad12c74e953b68ad85c78adc6408ed8435c64af4

https://git.kernel.org/stable/c/97792d0611ae2e6fe3ccefb0a94a1d802317c457

https://git.kernel.org/stable/c/801ea33ae82d6a9d954074fbcf8ea9d18f1543a7

https://git.kernel.org/stable/c/5a730a161ac2290d46d49be76b2b1aee8d2eb307

https://git.kernel.org/stable/c/327382dc0f16b268950b96e0052595efd80f7b0a

https://git.kernel.org/stable/c/244822c09b4f9aedfb5977f03c0deeb39da8ec7d

Details

Source: Mitre, NVD

Published: 2024-05-30

Updated: 2025-05-20

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H