CVEvulnerability
CVE-2024-35838
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2024-05-17
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix potential sta-link leak
When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.
Affected configurations
• linux linux kernel (>= 6.0 < 6.1.76)
• linux linux kernel (>= 6.2 < 6.6.15)
• linux linux kernel (>= 6.7 < 6.7.3)
• linux linux kernel 6.8
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1 Patch
- https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034 Patch
- https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26 Patch
- https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9 Patch
- https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1 Patch
- https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034 Patch
- https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26 Patch
- https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9 Patch