In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
The cipher pointer is not set, but is derefereced trying to set its content, which leads to a NULL pointer dereference. Fix it by pointing to the cipher parameter before dereferencing.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-1009-azure-fde | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub