CVE - CVE-2024-58072

CVE-ID
CVE-2024-58072	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update header file") introduced a global list of private data structures. Later on, commit 26634c4b1868 ("rtlwifi Modify existing bits to match vendor version 2013.02.07") started adding the private data to that list at probe time and added a hook, check_buddy_priv to find the private data from a similar device. However, that function was never used. Besides, though there is a lock for that list, it is never used. And when the probe fails, the private data is never removed from the list. This would cause a second probe to access freed memory. Remove the unused hook, structures and members, which will prevent the potential race condition on the list and its corruption during a second probe when probe fails.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/006e803af7408c3fc815b0654fc5ab43d34f0154 URL:https://git.kernel.org/stable/c/006e803af7408c3fc815b0654fc5ab43d34f0154 MISC:https://git.kernel.org/stable/c/1e39b0486cdb496cdfba3bc89886150e46acf6f4 URL:https://git.kernel.org/stable/c/1e39b0486cdb496cdfba3bc89886150e46acf6f4 MISC:https://git.kernel.org/stable/c/2fdac64c3c35858aa8ac5caa70b232e03456e120 URL:https://git.kernel.org/stable/c/2fdac64c3c35858aa8ac5caa70b232e03456e120 MISC:https://git.kernel.org/stable/c/465d01ef6962b82b1f0ad1f3e58b398dbd35c1c1 URL:https://git.kernel.org/stable/c/465d01ef6962b82b1f0ad1f3e58b398dbd35c1c1 MISC:https://git.kernel.org/stable/c/543e3e9f2e9e47ded774c74e680f28a0ca362aee URL:https://git.kernel.org/stable/c/543e3e9f2e9e47ded774c74e680f28a0ca362aee
Assigning CNA
kernel.org
Date Record Created
20250306	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250306)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)