Null Pointer Dereference in Linux Kernel's Wi-Fi Driver: CVE-2024-35946
Summary
DEBIAN-CVE-2024-35946: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif that weren't scanning. Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware management and system resources. It supports a wide range of functionalities, including networking, file systems, and device drivers. The kernel's Wi-Fi driver, specifically the rtw89 module, is responsible for managing wireless network interfaces. This vulnerability affects versions of the Linux kernel in Debian 13 and 14, potentially compromising system stability during Wi-Fi operations.
Vulnerability Detail
In the Linux kernel, a vulnerability identified as CVE-2024-35946 has been discovered in the rtw89 Wi-Fi driver. The issue arises during the cancellation of a scan operation, where the driver may attempt to access a null pointer if the virtual interface (vif) being used is not actively scanning. This can lead to system crashes or unexpected behavior, posing a risk to system reliability and user experience.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. It is recommended to apply the patch as soon as it becomes available to mitigate potential risks.
Conclusion
CVE-2024-35946 is a critical vulnerability in the Linux kernel's Wi-Fi driver that can lead to system crashes. Users are advised to update their kernel to the patched version 6.8.9-1 to ensure system stability and security. Regular monitoring for vulnerabilities using tools like Vulert can help maintain a secure environment.
See every vulnerability recorded for linux →
FAQ
CVE-2024-35946 is a vulnerability in the Linux kernel's Wi-Fi driver that can lead to null pointer dereference during scan cancellation.
This vulnerability can cause system crashes or instability when using Wi-Fi, particularly during scan operations.
If you are using Debian 13 or 14 with the affected Linux kernel versions, your system may be vulnerable.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While no specific workaround is available, it is crucial to plan for an update as soon as possible to avoid potential system instability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
