CVE-2024-58062 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before dereferncing it. Use for_each_vif_active_link that also does the check.
A vulnerability allowing a NULL pointer dereference has been identified in the Linux kernel's iwlwifi component. This issue arises when iterating over the links of a virtual interface (vif), as the process does not always ensure the validity of the pointer before dereferencing it. The vulnerability has been addressed by using a function that verifies the existence of the link before proceeding, thus preventing the potential dereference of a NULL pointer.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 1, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/7f6fb4b7611eb6371c493c42fefad84a1742bcbb | kernel.org | Patch |
| https://git.kernel.org/stable/c/cf704a7624f99eb2ffca1a16c69183e85544a613 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fbb563ad5032a07ac83c746ce5c8de5f25b5ffd0 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
| CWE-476 | NULL Pointer Dereference | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12, < 6.12.13 >= 6.13, < 6.13.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 1, 2025 | CVE Modified | CISA-ADP |
| Mar 25, 2025 | Initial Analysis | [email protected] |
| Mar 6, 2025 | New CVE Received | kernel.org |