CVE-2024-48873

A flaw was found in the Linux kernel's rtw89 wireless driver. A local user can cause a Denial of Service (DoS) through a system crash triggered by a null pointer dereference. This issue occurs because the driver fails to properly validate the return value when handling wireless probe request frames.

This vulnerability is rated Moderate rather than Important because exploitation requires local access and is limited to systems equipped with specific Realtek wireless hardware utilizing the rtw89 driver. In typical enterprise server and cloud deployments of Red Hat Enterprise Linux, Wi-Fi hardware is rarely installed or active, drastically restricting real-world exposure. A local user with system access could exploit this flaw to crash the host kernel and cause a denial of service, but confidentiality and integrity remain unimpacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.