CVE-2024-35838 wifi: mac80211: fix potential sta-link leak

2024-05-1714:02:36

Linux

github.com

linux

kernel

wifi

mac80211

vulnerability

fix

potential

station

link

leak

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.

CNA Affected

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "versions": [
      {
        "version": "cb71f1d136a6",
        "lessThan": "49aaeb8c539b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "587c58929761",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "e04bf59bdba0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "cb71f1d136a6",
        "lessThan": "b01a74b3ca6f",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "net/mac80211/sta_info.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.1.76",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "custom"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]