Threats tagged 'ghsa-ch3p-mhx6-fjx9'

CVE-2024-46755 is a medium severity vulnerability in the Linux kernel's mwifiex Wi-Fi driver. The function mwifiex_get_priv_by_id() can return pointers to unused private structures that lack a valid wireless physical device (wiphy) association. This can lead to a NULL pointer dereference and kernel crash when certain operations are performed, such as restarting wpa_supplicant with specific configurations. The issue is triggered when the driver attempts to access uninitialized or unused private data structures. This flaw has been fixed by ensuring only used priv pointers with a valid bss_mode are returned.