CVE-2024-35838 wifi: mac80211: fix potential sta-link leak

2024-05-1714:02:36

Linux

www.cve.org

linux kernel

wifi

vulnerability fix

mac80211

sta-link leak

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.5%

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "versions": [
      {
        "version": "cb71f1d136a6",
        "lessThan": "49aaeb8c539b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "587c58929761",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "e04bf59bdba0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "b01a74b3ca6f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.76",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]