CVE-2024-35845

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to insufficient processing of a format string in the Linux kernel's iwlwifi component, specifically in the dbg-tlv.c file. This could allow a remote attacker to access confidential data and cause a denial of service. The iwl fw ini debug info tlv is used as a string and must be properly terminated to prevent exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.