CVE-2024-35845

Critical

Published: 17/05/2024(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A vulnerability has been identified in the Linux kernel related to improper string termination in iwl_fw_ini_debug_info_tlv, which may lead to unexpected behavior.

Risk Assessment

Improper string termination may cause system errors, potentially affecting the stability and security of devices using this driver.

Recommendation

It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability and ensure the proper functioning of the iwlwifi driver.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_info_tlv is used as a string, so we must ensure the string is terminated correctly before using it.