CVE-2024-49928

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the wifi: rtw89 module, where the code avoided reading out of bounds when loading TX power FW elements. The issue arose because the loop-expression would execute one more time before the condition became false, resulting in the original code copying one more entry size beyond the valid region. This was fixed by moving the entry copy to the loop-body.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.