CVE-2024-35838 wifi: mac80211: fix potential sta-link leak

2024-05-1714:02:36

Linux

github.com

linux

kernel

wifi

mac80211

vulnerability

fix

potential

station

link

leak

AI Score

6.7

Confidence

Low

EPSS

Percentile

15.5%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "cb71f1d136a6",
        "lessThan": "49aaeb8c539b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cb71f1d136a6",
        "lessThan": "587c58929761",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cb71f1d136a6",
        "lessThan": "e04bf59bdba0",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "cb71f1d136a6",
        "lessThan": "b01a74b3ca6f",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.0"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.1.76",
        "versionType": "custom",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.15",
        "versionType": "custom",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.7.3",
        "versionType": "custom",
        "lessThanOrEqual": "6.7.*"
      },
      {
        "status": "unaffected",
        "version": "6.8",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "defaultStatus": "affected"
  }
]