In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: fix double-free bug
The storage for the TLV PC register data wasn't done like all the other storage in the drv->fw area, which is cleared at the end of deallocation. Therefore, the freeing must also be done differently, explicitly NULL'ing it out after the free, since otherwise there's a nasty double-free bug here if a file fails to load after this has been parsed, and we get another free later (e.g. because no other file exists.) Fix that by adding the missing NULL assignment.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade perfUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvm | Jun 6, 2024 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Apr 3, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extra | Jun 17, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-source-vanilla | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.5Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-generic-64k-hwe-22.04 | Jul 15, 2024 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub