Back to CVE records
Critical 9.1Published May 17, 2024
CVE-2024-35845wifi: iwlwifi: dbg-tlv: ensure NUL termination
Updated under an hour ago ()
Does this affect you?
It affects Linux and 3 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.
- CVSS
- 9.1 CRITICAL (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Weakness (CWE)
- CWE-134
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 15, 2026
Affected products
Linux Linux linux:linux (from the name) | from a9248de42464e546b624e3fc6a8b04b991af3591 before fabe2db7de32a881e437ee69db32e0de785a6209; from a9248de42464e546b624e3fc6a8b04b991af3591 before 96aa40761673da045a7774f874487cdb50c6a2f7; from a9248de42464e546b624e3fc6a8b04b991af3591 before c855a1a5b7e3de57e6b1b29563113d5e3bfdb89a; from a9248de42464e546b624e3fc6a8b04b991af3591 before 783d413f332a3ebec916664b366c28f58147f82c; from a9248de42464e546b624e3fc6a8b04b991af3591 before fec14d1cdd92f340b9ba2bd220abf96f9609f2a9; from a9248de42464e546b624e3fc6a8b04b991af3591 before 71d4186d470e9cda7cd1a0921b4afda737c6f641; from a9248de42464e546b624e3fc6a8b04b991af3591 before ea1d166fae14e05d49ffb0ea9fcd4658f8d3dcea | CNA record |
linux linux_kernel linux:linux_kernel | a9248de42464 | CISA ADP |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | before V1.1.1 | CISA ADP |
linux linux_kernel linux:linux_kernel | from 5.5 before 5.10.214; from 5.11 before 5.15.153; from 5.16 before 6.1.83; from 6.2 before 6.6.23; from 6.7 before 6.7.11; from 6.8 before 6.8.2 | NVD |
debian debian_linux debian:debian_linux | 10.0 | NVD |
References
- https://git.kernel.org/stable/c/fabe2db7de32a881e437ee69db32e0de785a6209patch
- https://git.kernel.org/stable/c/96aa40761673da045a7774f874487cdb50c6a2f7patch
- https://git.kernel.org/stable/c/c855a1a5b7e3de57e6b1b29563113d5e3bfdb89apatch
- https://git.kernel.org/stable/c/783d413f332a3ebec916664b366c28f58147f82cpatch
- https://git.kernel.org/stable/c/fec14d1cdd92f340b9ba2bd220abf96f9609f2a9patch
- https://git.kernel.org/stable/c/71d4186d470e9cda7cd1a0921b4afda737c6f641patch
- https://git.kernel.org/stable/c/ea1d166fae14e05d49ffb0ea9fcd4658f8d3dceapatch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlmailing-list, third-party-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.