CVE-2024-58064

low-risk
Published 2025-03-06

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() kunit_kzalloc() may return NULL, dereferencing it without NULL check may lead to NULL dereference. Add a NULL check for ies.

Do I need to act?

-
0.03% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (3)

Patch https://git.kernel.org/stable/c/0d17d81143f5aa56ee87e60bb1000a2372a0ada8
Patch https://git.kernel.org/stable/c/13c4f7714c6a1ecf748a2f22099447c14fe6ed8c
Patch https://git.kernel.org/stable/c/886271409603956edd09df229dde7442c410a872
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal