CVE-2024-35845

Katalog CVE

CVSS 9.1 · Critical EPSS 1,2%

Kerentanan Use of Externally-Controlled Format String pada linux kernel, debian linux. Skor CVSS 3.1 9.1 (Critical) menurut CISA ADP.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.

Rincian

Terbit di NVD

17 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-134: Use of Externally-Controlled Format String

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/71d4186d470e9cda7cd1a0921b4afda737c6f641 patch
• https://git.kernel.org/stable/c/783d413f332a3ebec916664b366c28f58147f82c patch
• https://git.kernel.org/stable/c/96aa40761673da045a7774f874487cdb50c6a2f7 patch
• https://git.kernel.org/stable/c/c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a patch
• https://git.kernel.org/stable/c/ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea patch
• https://git.kernel.org/stable/c/fabe2db7de32a881e437ee69db32e0de785a6209 patch
• https://git.kernel.org/stable/c/fec14d1cdd92f340b9ba2bd220abf96f9609f2a9 patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list · advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html