Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

CVE-2024-35912: Linux kernel Wi‑Fi driver could leak data

CVE-2024-35912 · published 2 years ago
Summary

The Wi‑Fi driver included in recent Debian and Canonical Linux kernels may leave some internal response data in memory when an error occurs. This could allow a malicious program to read information that should have been cleared. Apply the latest kernel updates from your Linux distribution to fix the issue.

What to do
  • Update debian linux to version 6.1.85-1.
  • Update debian linux to version 6.8.9-1.
  • Update canonical linux-aws-5.15 to version 5.15.0-1065.71~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1068.77~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1065.73~20.04.1.
  • Update canonical linux-gkeop-5.15 to version 5.15.0-1048.55~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-116.126~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1058.61~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1060.66~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-116.126~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1027.27~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1063.69~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1061.65~20.04.1.
  • Update canonical linux to version 5.15.0-116.126.
  • Update canonical linux-aws to version 5.15.0-1065.71.
  • Update canonical linux-aws-6.8 to version 6.8.0-1011.12~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1068.77.
  • Update canonical linux-azure-6.8 to version 6.8.0-1010.10~22.04.1.
  • Update canonical linux-azure-fde to version 5.15.0-1068.77.1.
  • Update canonical linux-gcp to version 5.15.0-1064.72.
  • Update canonical linux-gke to version 5.15.0-1062.68.
  • Update canonical linux-gkeop to version 5.15.0-1048.55.
  • Update canonical linux-ibm to version 5.15.0-1058.61.
  • Update canonical linux-intel-iotg to version 5.15.0-1060.66.
  • Update canonical linux-kvm to version 5.15.0-1062.67.
  • Update canonical linux-lowlatency to version 5.15.0-116.126.
  • Update canonical linux-nvidia to version 5.15.0-1060.61.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1009.9~22.04.1.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1026.26.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1015.15.
  • Update canonical linux-oracle to version 5.15.0-1063.69.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1008.8~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1058.61.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1035.39.
  • Update canonical linux-bluefield to version 5.15.0-1047.49.
  • Update canonical linux-aws-fips to version 5.15.0-1065.71+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1068.77+fips1.
  • Update canonical linux-fips to version 5.15.0-115.125+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1064.72+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1058.60.
  • Update canonical linux-realtime to version 5.15.0-1066.74.
  • Update canonical linux to version 6.8.0-38.38.
  • Update canonical linux-aws to version 6.8.0-1011.12.
  • Update canonical linux-azure to version 6.8.0-1010.10.
  • Update canonical linux-gcp to version 6.8.0-1010.11.
  • Update canonical linux-gke to version 6.8.0-1006.9.
  • Update canonical linux-ibm to version 6.8.0-1008.8.
  • Update canonical linux-intel to version 6.8.0-1007.14.
  • Update canonical linux-lowlatency to version 6.8.0-38.38.1.
  • Update canonical linux-nvidia to version 6.8.0-1009.9.
  • Update canonical linux-oem-6.8 to version 6.8.0-1008.8.
  • Update canonical linux-oracle to version 6.8.0-1008.8.
  • Update canonical linux-raspi to version 6.8.0-1007.7.
  • Update canonical linux-riscv to version 6.8.0-38.38.1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2006.6.
  • Update canonical linux-realtime to version 6.8.1-1004.4.
  • Update linux kernel to version 6.8.5.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian linux < 6.1.85-1
Fix: upgrade to 6.1.85-1
Debian:13 debian linux < 6.8.9-1
Fix: upgrade to 6.8.9-1
Debian:14 debian linux < 6.8.9-1
Fix: upgrade to 6.8.9-1
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1065.71~20.04.1
Fix: upgrade to 5.15.0-1065.71~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1068.77~20.04.1
Fix: upgrade to 5.15.0-1068.77~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1065.73~20.04.1
Fix: upgrade to 5.15.0-1065.73~20.04.1
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 < 5.15.0-1048.55~20.04.1
Fix: upgrade to 5.15.0-1048.55~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-116.126~20.04.1
Fix: upgrade to 5.15.0-116.126~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1058.61~20.04.1
Fix: upgrade to 5.15.0-1058.61~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1060.66~20.04.1
Fix: upgrade to 5.15.0-1060.66~20.04.1
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-116.126~20.04.1
Fix: upgrade to 5.15.0-116.126~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1027.27~20.04.1
Fix: upgrade to 5.15.0-1027.27~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1063.69~20.04.1
Fix: upgrade to 5.15.0-1063.69~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1061.65~20.04.1
Fix: upgrade to 5.15.0-1061.65~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Showing 50 of 136. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-116.126
Fix: upgrade to 5.15.0-116.126
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1065.71
Fix: upgrade to 5.15.0-1065.71
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1011.12~22.04.1
Fix: upgrade to 6.8.0-1011.12~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1068.77
Fix: upgrade to 5.15.0-1068.77
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1010.10~22.04.1
Fix: upgrade to 6.8.0-1010.10~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1068.77.1
Fix: upgrade to 5.15.0-1068.77.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1064.72
Fix: upgrade to 5.15.0-1064.72
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1062.68
Fix: upgrade to 5.15.0-1062.68
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1048.55
Fix: upgrade to 5.15.0-1048.55
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1058.61
Fix: upgrade to 5.15.0-1058.61
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1060.66
Fix: upgrade to 5.15.0-1060.66
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1062.67
Fix: upgrade to 5.15.0-1062.67
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-116.126
Fix: upgrade to 5.15.0-116.126
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1060.61
Fix: upgrade to 5.15.0-1060.61
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1009.9~22.04.1
Fix: upgrade to 6.8.0-1009.9~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1026.26
Fix: upgrade to 5.15.0-1026.26
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1015.15
Fix: upgrade to 5.15.0-1015.15
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1063.69
Fix: upgrade to 5.15.0-1063.69
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1008.8~22.04.1
Fix: upgrade to 6.8.0-1008.8~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1058.61
Fix: upgrade to 5.15.0-1058.61
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1035.39
Fix: upgrade to 5.15.0-1035.39
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1047.49
Fix: upgrade to 5.15.0-1047.49
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1065.71+fips1
Fix: upgrade to 5.15.0-1065.71+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1068.77+fips1
Fix: upgrade to 5.15.0-1068.77+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-115.125+fips1
Fix: upgrade to 5.15.0-115.125+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1064.72+fips1
Fix: upgrade to 5.15.0-1064.72+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1058.60
Fix: upgrade to 5.15.0-1058.60
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1066.74
Fix: upgrade to 5.15.0-1066.74
Ubuntu:24.04:LTS canonical linux < 6.8.0-38.38
Fix: upgrade to 6.8.0-38.38
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1011.12
Fix: upgrade to 6.8.0-1011.12
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1010.10
Fix: upgrade to 6.8.0-1010.10
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1010.11
Fix: upgrade to 6.8.0-1010.11
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1006.9
Fix: upgrade to 6.8.0-1006.9
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-intel < 6.8.0-1007.14
Fix: upgrade to 6.8.0-1007.14
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1009.9
Fix: upgrade to 6.8.0-1009.9
Ubuntu:24.04:LTS canonical linux-oem-6.8 < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1008.8
Fix: upgrade to 6.8.0-1008.8
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1007.7
Fix: upgrade to 6.8.0-1007.7
Ubuntu:24.04:LTS canonical linux-riscv < 6.8.0-38.38.1
Fix: upgrade to 6.8.0-38.38.1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2006.6
Fix: upgrade to 6.8.0-2006.6
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1004.4
Fix: upgrade to 6.8.1-1004.4
– linux linux_kernel >= 5.12, < 5.15.154
>= 5.16, < 6.1.85
>= 6.2, < 6.6.26
>= 6.7, < 6.8.5
6.9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.7.0, < 6.8.5
Fix: upgrade to 6.8.5
Original advisory text
wifi: iwlwifi: mvm: rfi: fix potential response leaks
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: rfi: fix potential response leaks If the rx payload length check fails, or if kmemdup() fails, we still need to free the command response. Fix that.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-401Memory Leak
Timeline
Published19 May 2024
Updated2 Nov 2026
First seen1 Sep 2026
Sources
CVE-2024-35912 · NVD
Track software like this
Free during beta