Oracle Linux: CVE-2024-36921: ELSA-2024-5101: kernel security update (IMPORTANT) (Multiple Advisories)

Oracle Linux: CVE-2024-36921: ELSA-2024-5101:kernel security update (IMPORTANT) (Multiple Advisories)

Severity

6

CVSS

(AV:L/AC:L/Au:M/C:C/I:C/A:C)

Published

05/30/2024

Created

08/20/2024

Added

08/16/2024

Modified

12/06/2024

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: guard against invalid STA ID on removal Guard against invalid station IDs in iwl_mvm_mld_rm_sta_id as that would result in out-of-bounds array accesses. This prevents issues should the driver get into a bad state during error handling. An out-of-bounds memory access flaw was found in the Linux kernel’s Wireless WiFi Link Next-Gen AGN driver in how a user removes it. This flaw allows a local user to crash or potentially escalate their privileges on the system.

Solution(s)

• oracle-linux-upgrade-kernel

References

• https://attackerkb.com/topics/cve-2024-36921
• CVE - 2024-36921
• ELSA-2024-5101
• ELSA-2024-5363