CVE-2024-35946: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-35946 is a vulnerability in the Linux kernel's rtw89 WiFi driver that was discovered and disclosed on May 19, 2024. The vulnerability affects Linux kernel versions up to (excluding) 6.6.27 and versions from 6.7 up to (excluding) 6.8.6. The issue involves a null pointer access vulnerability that occurs during scan abort operations in the rtw89 WiFi driver (NVD).

The vulnerability is a NULL Pointer Dereference (CWE-476) in the Linux kernel's rtw89 WiFi driver. The issue occurs when aborting a scan operation, where the code might use a virtual interface (vif) that wasn't actually scanning. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability can lead to a system crash due to null pointer dereference when aborting WiFi scans on affected systems. This primarily affects the availability of the system, with no direct impact on confidentiality or integrity, as indicated by the CVSS scoring (NVD).

The vulnerability requires local access and low privileges to exploit. The attack complexity is low, but user interaction is not required for exploitation. The vulnerability can be triggered during WiFi scan abort operations on affected systems (NVD).

The vulnerability has been fixed in the Linux kernel through a patch that modifies the scan abort operation to use the actual scanning virtual interface (rtwdev->scan_info.scanning_vif) instead of potentially incorrect vif references. The fix has been implemented in kernel versions 6.6.27 and 6.8.6 and later versions (Kernel Patch).