High 7.1Published Nov 19, 2024

CVE-2024-53059wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()

Updated under an hour ago (Oct 28, 2026, 5:00 AM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() 1. The size of the response packet is not validated. 2. The response buffer is not freed. Resolve these issues by switching to iwl_mvm_send_cmd_status(), which handles both size validation and frees the buffer.

CVSS: 7.1 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f130bb75d8817c560b48c4d1a0e5279968a0859d before 9c98ee7ea463a838235e7a0e35851b38476364f2; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 45a628911d3c68e024eed337054a0452b064f450; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 3f45d590ccbae6dfd6faef54efe74c30bd85d3da; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 64d63557ded6ff3ce72b18ab87a6c4b1b652161c; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 3eb986c64c6bfb721950f9666a3b723cf65d043f; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 9480c3045f302f43f9910d2d556d6cf5a62c1822; from f130bb75d8817c560b48c4d1a0e5279968a0859d before 07a6e3b78a65f4b2796a8d0d4adb1a15a81edead	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.1 before 5.4.285; from 5.5 before 5.10.229; from 5.11 before 5.15.171; from 5.16 before 6.1.116; from 6.2 before 6.6.60; from 6.7 before 6.11.7; 6.12; 6.12; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/9c98ee7ea463a838235e7a0e35851b38476364f2	patch
https://git.kernel.org/stable/c/45a628911d3c68e024eed337054a0452b064f450	patch
https://git.kernel.org/stable/c/3f45d590ccbae6dfd6faef54efe74c30bd85d3da	patch
https://git.kernel.org/stable/c/64d63557ded6ff3ce72b18ab87a6c4b1b652161c	patch
https://git.kernel.org/stable/c/3eb986c64c6bfb721950f9666a3b723cf65d043f	patch
https://git.kernel.org/stable/c/9480c3045f302f43f9910d2d556d6cf5a62c1822	patch
https://git.kernel.org/stable/c/07a6e3b78a65f4b2796a8d0d4adb1a15a81edead	patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.