CyberRota Analysis
AI-GeneratedThe vulnerability affects the iwlwifi driver in the Linux kernel, where a NULL pointer dereference can occur in the iwl_mld_remove_link function, potentially leading to a use-after-free condition. This flaw could allow an attacker to exploit the driver, resulting in system instability or arbitrary code execution. Organizations using affected Linux systems, particularly those relying on iwlwifi for wireless connectivity, should prioritize applying the fix to mitigate potential risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the function so we have it after we freed the link. But the link pointer can be NULL, and is not checked when the fw_id is stored. Fix it by simply freeing the link at the end of the function. fFixes: 0e66a39f4f0e ("wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link()")
Related CVEs
Other vulnerabilities affecting the same vendor(s)