CVE Database
/

CVE-2024-57995

Back to search

CVE-2024-57995

Published: Feb 27, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev() In ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different radio, it gets deleted from that radio through a call to ath12k_mac_unassign_link_vif(). This action frees the arvif pointer. Subsequently, there is a check involving arvif, which will result in a read-after-free scenario. Fix this by moving this check after arvif is again assigned via call to ath12k_mac_assign_link_vif(). Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1

VendorProductVersions

Linux

Linux

affected
b5068bc9180d06a5ac242b0f9263047c14f86211 - < 57100b87c77818cb0d582a92e5cb32fff85c757d
affected
b5068bc9180d06a5ac242b0f9263047c14f86211 - < f3a95a312419e4f1e992525917da9dbcd247038f
affected
b5068bc9180d06a5ac242b0f9263047c14f86211 - < 5a10971c7645a95f5d5dc23c26fbac4bf61801d0

Linux

Linux

affected
6.10
unaffected
0 - < 6.10
unaffected
6.12.57 - <= 6.12.*
unaffected
6.13.2 - <= 6.13.*
unaffected
6.14 - <= *

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now