In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check The lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() is normally called with input from the firmware, so it should use IWL_FW_CHECK() instead of WARN_ON().

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/3cca098c91391b3fa48142bfda57048b985c87f6 cve-icon cve-icon
https://git.kernel.org/stable/c/415f3634d53c7fb4cf07d2f5a0be7f2e15e6da33 cve-icon cve-icon
https://git.kernel.org/stable/c/9215152677d4b321801a92b06f6d5248b2b4465f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024092750-CVE-2024-46825-a5aa@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-46825 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-46825 cve-icon
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00028}

 epss

{'score': 0.00029}

Tue, 24 Dec 2024 14:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-703
Metrics threat_severity

Moderate

 threat_severity

Low

Wed, 20 Nov 2024 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Sun, 29 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sat, 28 Sep 2024 01:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 27 Sep 2024 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check The lookup function iwl_mvm_rcu_fw_link_id_to_link_conf() is normally called with input from the firmware, so it should use IWL_FW_CHECK() instead of WARN_ON().
Title wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-09-27T12:39:25.218Z

Updated: 2025-05-04T09:35:19.746Z

Reserved: 2024-09-11T15:12:18.285Z

Link: CVE-2024-46825

cve-icon Vulnrichment

Updated: 2024-09-29T14:13:06.869Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-27T13:15:15.027

Modified: 2024-11-20T17:24:04.660

Link: CVE-2024-46825

cve-icon Redhat

Severity : Low

Publid Date: 2024-09-27T00:00:00Z

Links: CVE-2024-46825 - Bugzilla