In the Linux kernel, the following vulnerability has been resolved:
iwlwifi: fix use-after-free
If no firmware was present at all (or, presumably, all of the firmware files failed to parse), we end up unbinding by calling device_release_driver(), which calls remove(), which then in iwlwifi calls iwl_drv_stop(), freeing the 'drv' struct. However the new code I added will still erroneously access it after it was freed.
Set 'failure=false' in this case to avoid the access, all data was already freed anyway.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linuxUpgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-fipsUpgrade linux-azureUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-aws | Nov 19, 2024 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub