Security readout for executives and security teams
Plain-English summary
A flaw in the Linux mwifiex Wi-Fi driver can cause a kernel crash when an unused wireless-interface record is selected during an access-point restart sequence. This can interrupt an affected device or appliance. The sources demonstrate a crash, but do not establish data theft, system takeover, or exploitation in the wild.
Executive priority
Treat this as a high-priority availability issue for Wi-Fi infrastructure and embedded products using mwifiex. Expedite inventory and vendor-supported updates where the driver is present. Priority can be reduced for systems verified not to include or load mwifiex. Current evidence does not justify describing this as actively exploited.
Technical view
mwifiex_get_priv_by_id() could return an unused priv structure without an attached wiphy. Subsequent processing could dereference the missing pointer and trigger a kernel oops. The Linux fix excludes entries whose bss_mode is NL80211_IFTYPE_UNSPECIFIED. The supplied CVSS 3.1 score is 8.8, although the documented result is a NULL-pointer crash.
Likely exposure
Exposure is most likely on Linux systems using mwifiex-supported Wi-Fi hardware, particularly where the mwifiex or mwifiex_sdio module supports access-point operation. The bundle lists multiple affected kernel releases, but its version encoding does not clearly define every vulnerable range. Systems without this driver or compatible hardware are unlikely to be exposed.
Exploitation context
The documented trigger involved stopping and restarting wpa_supplicant while establishing an access point, followed by wireless event processing. The CVSS vector specifies adjacent access, low complexity, no privileges, and no user interaction. However, KEV is false and the supplied sources provide no evidence of active exploitation or a weaponized public exploit.
Researcher notes
The source bundle supplies no CWE and does not explain how the CVSS confidentiality and integrity impacts were established. Its concrete evidence is a NULL-pointer dereference on a development-marked Linux 6.9 build during access-point lifecycle handling. Assess exploitability beyond denial of service cautiously, and use branch-specific stable commits or distributor advisories for fix verification.
Mitigation direction
- Install a vendor-supported kernel update containing the applicable Linux stable fix.
- Prioritize wireless access points, gateways, and embedded devices that load mwifiex.
- If patching is delayed, avoid unnecessary access-point restart cycles on affected systems.
- Check distribution or appliance-vendor guidance before applying kernel or driver changes.
Validation and detection
- Inventory kernel versions, Wi-Fi hardware, and loaded mwifiex-related modules.
- Confirm the installed kernel maps CVE-2024-46755 to a vendor-fixed package.
- Verify the applicable stable commit is present in custom or backported kernels.
- Review kernel logs for mwifiex NULL dereferences, oops events, or unexpected reboots.
- Test access-point lifecycle operations safely after updating, without reproducing crashes in production.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-46755 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H2.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
8.8HighVector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/a12cf97cbefa139ef8d95081f2ea047cbbd74b7aCVE reference, Linux
- https://git.kernel.org/stable/c/d834433ff313838a259bb6607055ece87b895b66CVE reference, Linux
- https://git.kernel.org/stable/c/9813770f25855b866b8ead8155b8806b2db70f6dCVE reference, Linux
- https://git.kernel.org/stable/c/cb67b2e51b75f1a17bee7599c8161b96e1808a70CVE reference, Linux
- https://git.kernel.org/stable/c/1a05d8d02cfa3540ea5dbd6b39446bd3f515521fCVE reference, Linux
- https://git.kernel.org/stable/c/c2618dcb26c7211342b54520b5b148c0d3471c8aCVE reference, Linux
- https://git.kernel.org/stable/c/c16916dd6c16fa7e13ca3923eb6b9f50d848ad03CVE reference, Linux
- https://git.kernel.org/stable/c/c145eea2f75ff7949392aebecf7ef0a81c1f6c14CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlCVE reference, CVE
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.htmlCVE reference, CVE
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.