CVE-2024-35845

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: dbg-tlv: ensure NUL termination

The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < fabe2db7de32a881e437ee69db32e0de785a6209affected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < 96aa40761673da045a7774f874487cdb50c6a2f7affected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < c855a1a5b7e3de57e6b1b29563113d5e3bfdb89aaffected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < 783d413f332a3ebec916664b366c28f58147f82caffected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < fec14d1cdd92f340b9ba2bd220abf96f9609f2a9affected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < 71d4186d470e9cda7cd1a0921b4afda737c6f641affected
LinuxLinuxa9248de42464e546b624e3fc6a8b04b991af3591 < ea1d166fae14e05d49ffb0ea9fcd4658f8d3dceaaffected
LinuxLinux5.5affected
LinuxLinux0 < 5.5unaffected
LinuxLinux5.10.214 <= 5.10.*unaffected
LinuxLinux5.15.153 <= 5.15.*unaffected
LinuxLinux6.1.83 <= 6.1.*unaffected
LinuxLinux6.6.23 <= 6.6.*unaffected
LinuxLinux6.7.11 <= 6.7.*unaffected
LinuxLinux6.8.2 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

Additional References

References