01 Record

CVE-2024-58063

wifi: rtlwifi: fix memory leaks and invalid access at probe error path

MediumPUBLISHEDCNA: Linux

CNA base score5.5 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

wifi: rtlwifi: fix memory leaks and invalid access at probe error path

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.21% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 10.7% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-03-06 15:54Z1 YR AGO

Last updated

2026-05-12 12:02Z3 MO AGO

Reserved

2025-03-06

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Medium (CVSS 5.5)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

8c884dd157b53001b07d5df6ff17279262c67ba5f4d1260295b0e10c128d271d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0c8173385e549f95cd80c3fff5aab87b4f881d8d to < 85b67b4c4a0f8a6fb20cf4ef7684ff2b0cf559df, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < 455e0f40b5352186a9095f2135d5c89255e7c39a, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < b96371339fd9cac90f5ee4ac17ee5c4cbbdfa6f7, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < ee0b0d7baa8a6d42c7988f6e50c8f164cdf3fa47, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < 624cea89a0865a2bc3e00182a6b0f954a94328b4, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < 32acebca0a51f5e372536bfdc0d7d332ab749013, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < 6b76bab5c257463302c9e97f5d84d524457468eb, 0c8173385e549f95cd80c3fff5aab87b4f881d8d to < e7ceefbfd8d447abc8aca8ab993a942803522c06, 2.6.38—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/85b67b4c4a0f8a6fb20cf4ef7684ff2b0cf559df
git.kernel.orghttps://git.kernel.org/stable/c/455e0f40b5352186a9095f2135d5c89255e7c39a
git.kernel.orghttps://git.kernel.org/stable/c/b96371339fd9cac90f5ee4ac17ee5c4cbbdfa6f7
git.kernel.orghttps://git.kernel.org/stable/c/ee0b0d7baa8a6d42c7988f6e50c8f164cdf3fa47
git.kernel.orghttps://git.kernel.org/stable/c/624cea89a0865a2bc3e00182a6b0f954a94328b4
git.kernel.orghttps://git.kernel.org/stable/c/32acebca0a51f5e372536bfdc0d7d332ab749013
git.kernel.orghttps://git.kernel.org/stable/c/6b76bab5c257463302c9e97f5d84d524457468eb
git.kernel.orghttps://git.kernel.org/stable/c/e7ceefbfd8d447abc8aca8ab993a942803522c06
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

01 Record index

CVE-2024-58063

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-58063

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References