wifi：mac80211：不要将已停止的 vif 传递给 .get_txpower 中的驱动程序（CVE-2024-50237）

CVE编号

CVE-2024-50237

利用情况

暂无

补丁情况

N/A

披露时间

2024-11-09

漏洞描述

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23
https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc
https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f
https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21
https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088
https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f
https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c
https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea

CVSS3评分 N/A

• 攻击路径 N/A
• 攻击复杂度 N/A
• 权限要求 N/A
• 影响范围 N/A
• 用户交互 N/A
• 可用性 N/A
• 保密性 N/A
• 完整性 N/A

N/A

CWE-ID	漏洞类型

Exp相关链接

- avd.aliyun.com