Back
CVE-2024-35845wifi: iwlwifi: dbg-tlv: ensure NUL termination
- 9.1CriticalCVSS base score
- 1.2%Exploitation in 30 daysEPSS · top 32% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.
Timeline
ID reserved
By Linux
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Critical9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
| NVDNVD · Modified | 3.1 | Critical9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H |
- EPSS (exploitation in 30 days)
- 1.2% · top 32% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.1.
Affected products
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < fabe2db7de32a881e437ee69db32e0de785a6209
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < 96aa40761673da045a7774f874487cdb50c6a2f7
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < 783d413f332a3ebec916664b366c28f58147f82c
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < fec14d1cdd92f340b9ba2bd220abf96f9609f2a9
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < 71d4186d470e9cda7cd1a0921b4afda737c6f641
- affected a9248de42464e546b624e3fc6a8b04b991af3591 – < ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea
- affected 5.5
- unaffected < 5.5
- unaffected 5.10.214 – ≤ 5.10.*
- unaffected 5.15.153 – ≤ 5.15.*
- unaffected 6.1.83 – ≤ 6.1.*
- unaffected 6.6.23 – ≤ 6.6.*
- unaffected 6.7.11 – ≤ 6.7.*
- unaffected 6.8.2 – ≤ 6.8.*
- unaffected 6.9 – ≤ *
References
References9
- https://git.kernel.org/stable/c/fabe2db7de32a881e437ee69db32e0de785a6209 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/96aa40761673da045a7774f874487cdb50c6a2f7 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/783d413f332a3ebec916664b366c28f58147f82c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/fec14d1cdd92f340b9ba2bd220abf96f9609f2a9 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/71d4186d470e9cda7cd1a0921b4afda737c6f641 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html (opens in a new tab)x_transferred
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-35544 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-35845)Record last updated .