CVE-2024-35913

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF

The Linux kernel CVE team has assigned CVE-2024-35913 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051956-CVE-2024-35913-72a4@gregkh/T

This vulnerability is rated Low severity because it requires specific Intel wireless hardware and triggers a non-fatal kernel warning without enabling privilege escalation or arbitrary code execution. Most Red Hat Enterprise Linux systems run in enterprise server or cloud environments where Wi-Fi adapters and wireless networking stacks are neither installed nor utilized. On hosts using affected Intel wireless devices, the issue is confined to notification handling in the driver and does not compromise system integrity or confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.