Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: avoid NULL pointer dereference iwl_mvm_tx_skb_sta() and iwl_mvm_tx_mpdu() verify that the mvmvsta pointer is not NULL. It retrieves this pointer using iwl_mvm_sta_from_mac80211, which is dereferencing the ieee80211_sta pointer. If sta is NULL, iwl_mvm_sta_from_mac80211 will dereference a NULL pointer. Fix this by checking the sta pointer before retrieving the mvmsta from it. If sta is not NULL, then mvmsta isn't either.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 to < cbc6fc9cfcde151ff5eadaefdc6155f99579384faffected5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 to < 6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28affected5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 to < cdbf51bfa4b0411820806777da36d93d49bc49a1affected5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 to < c0b4f5d94934c290479180868a32c15ba36a6d9eaffected5b577a90fb3d86447ee86f8e0c6ddbd5da2ef8c9 to < 557a6cd847645e667f3b362560bd7e7c09aac284affected
Linux Linux
Default version status: affected
3.14affected0 to < 3.14unaffected6.1.120 to ≤ 6.1.*unaffected6.6.55 to ≤ 6.6.*unaffected6.10.14 to ≤ 6.10.*unaffected6.11.3 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/cbc6fc9cfcde151ff5eadaefdc6155f99579384f ↗
- https://git.kernel.org/stable/c/6dcadb2ed3b76623ab96e3e7fbeda1a374d01c28 ↗
- https://git.kernel.org/stable/c/cdbf51bfa4b0411820806777da36d93d49bc49a1 ↗
- https://git.kernel.org/stable/c/c0b4f5d94934c290479180868a32c15ba36a6d9e ↗
- https://git.kernel.org/stable/c/557a6cd847645e667f3b362560bd7e7c09aac284 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html ↗