CVE-2024-26694

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a double-free bug in the iwlwifi driver. The storage for the TLV PC register data was not handled like other storage in the drv->fw area, which is cleared at the end of deallocation. This could lead to a double-free bug if a file fails to load after being parsed and another free occurs later. The bug was fixed by adding a missing NULL assignment. The vulnerability could allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.