CVE-2024-58062

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: avoid NULL pointer dereference

When iterating over the links of a vif, we need to make sure that the pointer is valid (in other words - that the link exists) before dereferncing it. Use for_each_vif_active_link that also does the check.

This vulnerability is rated as having a Moderate impact because exploitation is limited to causing a denial of service via a kernel crash, without compromising data confidentiality or integrity. The issue occurs within the Intel wireless driver (iwlwifi/iwlmvm) during virtual interface link handling, requiring specific Intel Wi-Fi hardware to be present and active. Most enterprise server deployments running Red Hat Enterprise Linux do not operate wireless network devices, substantially lowering real-world exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.