In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: avoid NULL pointer dereference
iwlmvmtxskbsta() and iwlmvmtxmpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwlmvmstafrommac80211, which is dereferencing the ieee80211sta pointer. If sta is NULL, iwlmvmstafrommac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2874.0,
"function_hash": "97865456023647913144083490877030201061"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbc6fc9cfcde151ff5eadaefdc6155f99579384f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_mpdu"
},
"id": "CVE-2024-49929-13674a9d"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1019.0,
"function_hash": "260207506666286380911035806086620943243"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbc6fc9cfcde151ff5eadaefdc6155f99579384f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_skb_sta"
},
"id": "CVE-2024-49929-295c50f1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2966.0,
"function_hash": "36804040491663523022156429857841600002"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0b4f5d94934c290479180868a32c15ba36a6d9e",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_mpdu"
},
"id": "CVE-2024-49929-2ae50dbb"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"267999932606117141524030817589020980073",
"129957255753912195061329176043437502502",
"250932652440402190274123290097989917616",
"25523554033450222674888366578648012724",
"261924681451671946840793920088245976737",
"272086869116714225456445100575490088071",
"10797126499283675506987620574649184638",
"281678568017019474617353947383068907173",
"67179090802946632302929631549442940928",
"270541283420464464035572819021853091963",
"11387371108674244878074789483354509052",
"56883412457400380132337271331511022233",
"90531400305833456068597660688414197919",
"253913173870779070357618961240868532871",
"190725796270968388470836123993038721833",
"4531418900794853285782521852897775544",
"191323501848641244553494188802912988662",
"10797126499283675506987620574649184638",
"187315499125472272601696950826096154679"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cbc6fc9cfcde151ff5eadaefdc6155f99579384f",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c"
},
"id": "CVE-2024-49929-2e0f7ac9"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2966.0,
"function_hash": "36804040491663523022156429857841600002"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_mpdu"
},
"id": "CVE-2024-49929-399d17d5"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"267999932606117141524030817589020980073",
"129957255753912195061329176043437502502",
"250932652440402190274123290097989917616",
"25523554033450222674888366578648012724",
"261924681451671946840793920088245976737",
"283385241108121866570696711085196631630",
"314359343682830371750568096175928753757",
"278176282217117285055412264788500452760",
"67179090802946632302929631549442940928",
"270541283420464464035572819021853091963",
"11387371108674244878074789483354509052",
"92665938558125747617481277247402878481",
"274379910836215627238309355724956960605",
"161425077987990061067583013898581093708",
"284883635430380323188946209146927574516",
"314359343682830371750568096175928753757",
"70859921040467265007336073948610106237"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c"
},
"id": "CVE-2024-49929-4c9cdd63"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2966.0,
"function_hash": "36804040491663523022156429857841600002"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@557a6cd847645e667f3b362560bd7e7c09aac284",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_mpdu"
},
"id": "CVE-2024-49929-6cbeb6db"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1473.0,
"function_hash": "20163489513144581717026938450514912887"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0b4f5d94934c290479180868a32c15ba36a6d9e",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_skb_sta"
},
"id": "CVE-2024-49929-949f1b6d"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"267999932606117141524030817589020980073",
"129957255753912195061329176043437502502",
"250932652440402190274123290097989917616",
"25523554033450222674888366578648012724",
"261924681451671946840793920088245976737",
"283385241108121866570696711085196631630",
"314359343682830371750568096175928753757",
"278176282217117285055412264788500452760",
"67179090802946632302929631549442940928",
"270541283420464464035572819021853091963",
"11387371108674244878074789483354509052",
"92665938558125747617481277247402878481",
"274379910836215627238309355724956960605",
"161425077987990061067583013898581093708",
"284883635430380323188946209146927574516",
"314359343682830371750568096175928753757",
"70859921040467265007336073948610106237"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@557a6cd847645e667f3b362560bd7e7c09aac284",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c"
},
"id": "CVE-2024-49929-aa717077"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 2966.0,
"function_hash": "36804040491663523022156429857841600002"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdbf51bfa4b0411820806777da36d93d49bc49a1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_mpdu"
},
"id": "CVE-2024-49929-b366c52f"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1473.0,
"function_hash": "20163489513144581717026938450514912887"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@557a6cd847645e667f3b362560bd7e7c09aac284",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_skb_sta"
},
"id": "CVE-2024-49929-b63da63e"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"267999932606117141524030817589020980073",
"129957255753912195061329176043437502502",
"250932652440402190274123290097989917616",
"25523554033450222674888366578648012724",
"261924681451671946840793920088245976737",
"283385241108121866570696711085196631630",
"314359343682830371750568096175928753757",
"278176282217117285055412264788500452760",
"67179090802946632302929631549442940928",
"270541283420464464035572819021853091963",
"11387371108674244878074789483354509052",
"92665938558125747617481277247402878481",
"274379910836215627238309355724956960605",
"161425077987990061067583013898581093708",
"284883635430380323188946209146927574516",
"314359343682830371750568096175928753757",
"70859921040467265007336073948610106237"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdbf51bfa4b0411820806777da36d93d49bc49a1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c"
},
"id": "CVE-2024-49929-bac5570c"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1473.0,
"function_hash": "20163489513144581717026938450514912887"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cdbf51bfa4b0411820806777da36d93d49bc49a1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_skb_sta"
},
"id": "CVE-2024-49929-ccd00a4a"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"267999932606117141524030817589020980073",
"129957255753912195061329176043437502502",
"250932652440402190274123290097989917616",
"25523554033450222674888366578648012724",
"261924681451671946840793920088245976737",
"283385241108121866570696711085196631630",
"314359343682830371750568096175928753757",
"278176282217117285055412264788500452760",
"67179090802946632302929631549442940928",
"270541283420464464035572819021853091963",
"11387371108674244878074789483354509052",
"92665938558125747617481277247402878481",
"274379910836215627238309355724956960605",
"161425077987990061067583013898581093708",
"284883635430380323188946209146927574516",
"314359343682830371750568096175928753757",
"70859921040467265007336073948610106237"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0b4f5d94934c290479180868a32c15ba36a6d9e",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c"
},
"id": "CVE-2024-49929-dfa78a65"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1473.0,
"function_hash": "20163489513144581717026938450514912887"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/tx.c",
"function": "iwl_mvm_tx_skb_sta"
},
"id": "CVE-2024-49929-e8b4940e"
}
]