In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
The cipher pointer is not set, but is derefereced trying to set its content, which leads to a NULL pointer dereference. Fix it by pointing to the cipher parameter before dereferencing.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-azure | Feb 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub