CVE-2024-57997

low-risk
Published 2025-02-27

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation size KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan_survey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel.

Do I need to act?

-
0.09% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/34cd2817708aec51ef1a6c007e0d6d5342a025d7
Patch https://git.kernel.org/stable/c/6200d947f050efdba4090dfefd8a01981363d954
Patch https://git.kernel.org/stable/c/64c4dcaeac1dc1030e47883b04a617ca9a4f164e
Patch https://git.kernel.org/stable/c/ae68efdff7a7a42ab251cac79d8713de6f0dbaa0
Patch https://git.kernel.org/stable/c/e95f9c408ff8311f75eeabc8acf34a66670d8815
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal