NVD Vulnerability Detail

CVE-2024-50237

Summary	In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data
Publication Date	Nov. 9, 2024, 8:15 p.m.
Registration Date	Nov. 10, 2024, 5:01 a.m.
Last Update	Nov. 15, 2024, 1:42 a.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088	Patch
2	https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f	Patch
3	https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c	Patch
4	https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f	Patch
5	https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21	Patch
6	https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea	Patch
7	https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc	Patch
8	https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23	Patch

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-908	初期化されていないリソースの使用	https://cwe.mitre.org/data/definitions/908.html

JVN Vulnerability Information

Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性

Title	Linux の Linux Kernel における初期化されていないリソースの使用に関する脆弱性
Summary	Linux の Linux Kernel には、初期化されていないリソースの使用に関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Oct. 8, 2024, midnight
Registration Date	Nov. 15, 2024, 5:51 p.m.
Last Update	Aug. 21, 2025, 1:49 p.m.

Affected System

Linux

Linux Kernel 3.19 以上 4.19.323 未満

Linux Kernel 4.20 以上 5.4.285 未満

Linux Kernel 5.11 以上 5.15.171 未満

Linux Kernel 5.16 以上 6.1.116 未満

Linux Kernel 5.5 以上 5.10.229 未満

Linux Kernel 6.12

Linux Kernel 6.2 以上 6.6.60 未満

Linux Kernel 6.7 以上 6.11.7 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-50237	https://www.cve.org/CVERecord?id=CVE-2024-50237
National Vulnerability Database (NVD)
2	CVE-2024-50237	https://nvd.nist.gov/vuln/detail/CVE-2024-50237

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-908	http://cwe.mitre.org/data/definitions/908.html

ベンダー情報

No	Name	URL
Kernel.org git repositories
1	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (393b6bc)	https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23
2	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (3ccf525)	https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc
3	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (78b698f)	https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f
4	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (8f6cd4d)	https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21
5	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (b0b862a)	https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088
6	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (b2bcbe5)	https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f
7	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (c21efba)	https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c
8	wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (ee35c42)	https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea
Linux Kernel
9	Linux Kernel Archives	https://www.kernel.org

その他

No	Name	URL
ICS-CERT ADVISORY
1	ICSA-25-226-07	https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07
JVN
2	JVNVU#92169998	https://jvn.jp/vu/JVNVU92169998/index.html

Change Log

No	Changed Details	Date of change
1	[2024年11月15日] 掲載	Nov. 15, 2024, 5:51 p.m.
2	[2025年08月21日] 参考情報：JVN (JVNVU#92169998) を追加参考情報：ICS-CERT ADVISORY (ICSA-25-226-07) を追加	Aug. 21, 2025, 1:49 p.m.