---
id: CVE-2024-35946
title: 'wifi: rtw89: fix null pointer access when abort scan'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  wifi: rtw89: fix null pointer access when abort scan

  During cancel scan we might use vif that weren't scanning.
  Fix this by using the actual scanning vif.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd <
    96b49702bc0db9263c06840099b5008b72be919a
  - >-
    Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd <
    b34d64e9aa5505e3c84570aed5c757f1839573e8
  - >-
    Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd <
    4f11c741908dab7dd48fa5a986b210d4fc74ca8d
  - >-
    Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd <
    7e11a2966f51695c0af0b1f976a32d64dee243b2
  - Linux 5.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-05-20T14:06:33.157936Z'
published: '2024-05-19'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:18:23.972Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-35946'
references:
  - url: 'https://git.kernel.org/stable/c/96b49702bc0db9263c06840099b5008b72be919a'
  - url: 'https://git.kernel.org/stable/c/b34d64e9aa5505e3c84570aed5c757f1839573e8'
  - url: 'https://git.kernel.org/stable/c/4f11c741908dab7dd48fa5a986b210d4fc74ca8d'
  - url: 'https://git.kernel.org/stable/c/7e11a2966f51695c0af0b1f976a32d64dee243b2'
tags:
  - cve.org
epss: 0.00213
epssPercentile: 0.11688
ingestedAt: '2026-11-03T12:44:28.813Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: fix null pointer access when abort scan

During cancel scan we might use vif that weren't scanning.
Fix this by using the actual scanning vif.

## Affected

- `Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 96b49702bc0db9263c06840099b5008b72be919a`
- `Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < b34d64e9aa5505e3c84570aed5c757f1839573e8`
- `Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 4f11c741908dab7dd48fa5a986b210d4fc74ca8d`
- `Linux >= e3ec7017f6a20d12ddd9fe23d345ebb7b8c104dd < 7e11a2966f51695c0af0b1f976a32d64dee243b2`
- `Linux 5.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.