Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() fails. The current code returns ERR_PTR(0) (which is NULL) on this path. I believe the missing error code potentially leads to a use after free involving debugfs.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected ca980f1911a7144d451d1c31298ab8507c6bd88f before 5c432da1ee191e9f7830dd516456706063d7bec3; affected 7dd6350307af6521b6240b295c93b7eec4daebe6 before f95598a133a905fd937354ad902773d05593b8b9; affected c0e43c3f6c0a79381b468574c241065998412b7c before 991e2066f6009d3cb898413058c62dbcc92bd6d2; affected 70a1b527eaea9430b1bd87de59f3b9f6bd225701 before 1d068272c21d886d06526454b68368100ba0a720; affected 90a0d9f339960448a3acc1437a46730f975efd6a before cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6; affected c80832d445653baba5ac80cd2c2637c437ac881b; affected b398120fbe0acfef60b16f6a0f69902d385d7728; affected 2e9f85ee3b46453a2f250a57d3a9f10c70c71202; affected 6663c52608d8d8727bf1911e6d9218069ba1c85e; affected 5.4.297 before 5.5; affected 5.10.241 before 5.11; affected 5.15.190 before 5.16; affected 6.1.148 before 6.2 |
| Linux / Linux | affected 6.6.102 before 6.6.160; affected 6.12.42 before 6.12.114 |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/5c432da1ee191e9f7830dd516456706063d7bec3
- https://git.kernel.org/stable/c/f95598a133a905fd937354ad902773d05593b8b9
- https://git.kernel.org/stable/c/991e2066f6009d3cb898413058c62dbcc92bd6d2
- https://git.kernel.org/stable/c/1d068272c21d886d06526454b68368100ba0a720
- https://git.kernel.org/stable/c/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6