CVE-2024-35946

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-05-19 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix null pointer access when abort scan During cancel scan we might use vif that weren't scanning. Fix this by using the actual scanning vif.

Weakness Classification (1)

Affected Software (6)

VendorProductVersion
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 96b49702bc0db9263c06840099b5008b72be919a
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < b34d64e9aa5505e3c84570aed5c757f1839573e8
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 4f11c741908dab7dd48fa5a986b210d4fc74ca8d
Linux Linux e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 7e11a2966f51695c0af0b1f976a32d64dee243b2
Linux Linux 5.16
linux linux_kernel < 6.6.27

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.21%
Raw Score 0.002130
Percentile 11.7%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00213
2026-10-29
0.00213

Intelligence Sources

mitre ref →
nvd ref →