CVE-2024-50237
Qualcomm Atheros Wi-Fi Uninitialized Data Pointer Vulnerability
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data
INFO
Published Date :
Nov. 9, 2024, 11:15 a.m.
Last Modified :
Nov. 14, 2024, 4:42 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-50237.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-50237 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-50237 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Reanalysis by [email protected]
Nov. 14, 2024
Action Type Old Value New Value Removed CWE NIST CWE-401 Added CWE NIST CWE-908 Changed CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19 up to (excluding) 4.19.323 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.229 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.171 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.116 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.60 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.7 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 3.19 up to (excluding) 4.19.323 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.229 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.171 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.116 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.60 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.7 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* -
Initial Analysis by [email protected]
Nov. 14, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Changed Reference Type https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23 No Types Assigned https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23 Patch Changed Reference Type https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc No Types Assigned https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc Patch Changed Reference Type https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f No Types Assigned https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f Patch Changed Reference Type https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21 No Types Assigned https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21 Patch Changed Reference Type https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088 No Types Assigned https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088 Patch Changed Reference Type https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f No Types Assigned https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f Patch Changed Reference Type https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c No Types Assigned https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c Patch Changed Reference Type https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea No Types Assigned https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea Patch Added CWE NIST CWE-401 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19 up to (excluding) 4.19.323 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.285 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.229 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.171 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.116 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.60 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.11.7 *cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 09, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data Added Reference kernel.org https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21 [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc [No types assigned] Added Reference kernel.org https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23 [No types assigned]
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-50237 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-50237
weaknesses.