CVE-2024-48873: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-11 · updated 2026-06-17
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: check return value of ieee80211_probereq_get() for RNR The return value of ieee80211_probereq_get() might be NULL, so check it before using to avoid NULL pointer access. Addresses-Coverity-ID: 1529805 ("Dereference null return value")

Affected products

Linux kernel: from 6.4 before 6.6.66; from 6.7 before 6.12.5 — fixed in 6.12.5, 6.6.66

How to fix

Upgrade to a fixed version: Linux kernel 6.12.5, 6.6.66. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/1a0f54cb3fea5d087440b2bae03202c445156a8d
https://git.kernel.org/stable/c/630d5d8f2bf6b340202b6bc2c05d794bbd8e4c1c
https://git.kernel.org/stable/c/7296e5611adb2c619bd7bd3817ddde7ba865ef17

Get alerted when CVE-2024-48873 or the next vulnerability affects your stack