In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: guard against invalid STA ID on removal
Guard against invalid station IDs in iwlmvmmldrmsta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94f80a8ec15e238b78521f20f8afaed60521a294",
"target": {
"function": "iwl_mvm_mld_rm_sta_id",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-016fa04c",
"signature_version": "v1",
"digest": {
"length": 252.0,
"function_hash": "277904275341900465623818077886766447022"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@94f80a8ec15e238b78521f20f8afaed60521a294",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-4747ce3f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216933866065832702557942643164241871535",
"329930395485980660616101351250238858934",
"87270734762995417964734738637281834804",
"70430636706455061745998749908739397230",
"6595628977963519129306904719856295964"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fab21d220017daa5fd8a3d788ff25ccfecfaae2f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-4bb41332",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216933866065832702557942643164241871535",
"329930395485980660616101351250238858934",
"87270734762995417964734738637281834804",
"70430636706455061745998749908739397230",
"6595628977963519129306904719856295964"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17f64517bf5c26af56b6c3566273aad6646c3c4f",
"target": {
"function": "iwl_mvm_mld_rm_sta_id",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-728ebe07",
"signature_version": "v1",
"digest": {
"length": 252.0,
"function_hash": "277904275341900465623818077886766447022"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17f64517bf5c26af56b6c3566273aad6646c3c4f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-8ee5078b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"216933866065832702557942643164241871535",
"329930395485980660616101351250238858934",
"87270734762995417964734738637281834804",
"70430636706455061745998749908739397230",
"6595628977963519129306904719856295964"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fab21d220017daa5fd8a3d788ff25ccfecfaae2f",
"target": {
"function": "iwl_mvm_mld_rm_sta_id",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/mld-sta.c"
},
"deprecated": false,
"id": "CVE-2024-36921-a9de5755",
"signature_version": "v1",
"digest": {
"length": 252.0,
"function_hash": "277904275341900465623818077886766447022"
},
"signature_type": "Function"
}
]