https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:50:21 +0000 https://cve.radiocsirt.org/vuln/cve-2024-46755 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()</p> <p>mwifiex_get_priv_by_id() returns the priv pointer corresponding to the bss_num and bss_type, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL pointer dereferences further down the callstack. Fix this by returning only used priv pointers which have priv-&gt;bss_mode set to something else than NL80211_IFTYPE_UNSPECIFIED.</p> <p>Said NULL pointer dereference happened when an Accesspoint was started with wpa_supplicant -i mlan0 with this config:</p> <p>network={ ssid=&#34;somessid&#34; mode=2 frequency=2412 key_mgmt=WPA-PSK WPA-PSK-SHA256 proto=RSN group=CCMP pairwise=CCMP psk=&#34;12345678&#34; }</p> <p>When waiting for the AP to be established, interrupting wpa_supplicant with &lt;ctrl-c&gt; and starting it again this happens:</p> <p>| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000140 | Mem abort info: | ESR = 0x0000000096000004 | EC = 0x25: DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | FSC = 0x04: level 0 translation fault | Data abort info: | ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 | CM = 0, WnR = 0, TnD = 0, TagAccess = 0 | GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp=0000000046d96000 | [0000000000000140] p…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()</p> <p>mwifiex_get_priv_by_id() returns the priv pointer corresponding to the bss_num and bss_type, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL pointer dereferences further down the callstack. Fix this by returning only used priv pointers which have priv-&gt;bss_mode set to something else than NL80211_IFTYPE_UNSPECIFIED.</p> <p>Said NULL pointer dereference happened when an Accesspoint was started with wpa_supplicant -i mlan0 with this config:</p> <p>network={ ssid=&#34;somessid&#34; mode=2 frequency=2412 key_mgmt=WPA-PSK WPA-PSK-SHA256 proto=RSN group=CCMP pairwise=CCMP psk=&#34;12345678&#34; }</p> <p>When waiting for the AP to be established, interrupting wpa_supplicant with &lt;ctrl-c&gt; and starting it again this happens:</p> <p>| Unable to handle kernel NULL pointer dereference at virtual address 0000000000000140 | Mem abort info: | ESR = 0x0000000096000004 | EC = 0x25: DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | FSC = 0x04: level 0 translation fault | Data abort info: | ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 | CM = 0, WnR = 0, TnD = 0, TagAccess = 0 | GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp=0000000046d96000 | [0000000000000140] p…</p> https://cve.radiocsirt.org/vuln/cve-2024-46755