Memory Allocation Issue in Linux Kernel wcn36xx WiFi Driver

CVE-2024-57997

Summary

A memory allocation issue has been identified in the wcn36xx WiFi driver within the Linux kernel. This vulnerability arises from an incorrect size calculation during the allocation of memory for the channel survey. As a result, it can lead to the use of uninitialized values when no frames are present on the channel. The issue has been addressed by improving the allocation routine with kcalloc, ensuring proper memory initialization and reinforcing system stability.

References