DEBIAN-CVE-2024-35912

DEBIAN-CVE-2024-35912 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup() fails, we still need to free the command response. Fix that.

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:13	linux	0, 0
Debian	linux
Debian:14	linux	0, 0
Debian:12	linux	6.1.38-2, 6.1.38-2~bpo11+1, 6.1.38-3

Timeline

May 19, 2024 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2024-35912 advisory

Open in Interactive Console →