CVE-2024-35838 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them. Fix that.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Enterprise Linux

No data.

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10	cpe:/a:redhat:enterprise_linux:8::nfv	RHSA-2024:4352	2024-07-08T00:00:00Z
kernel-0:4.18.0-553.8.1.el8_10	cpe:/o:redhat:enterprise_linux:8	RHSA-2024:4211	2024-07-02T00:00:00Z

References

Link	Providers
https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1
https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034
https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26
https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9
https://lore.kernel.org/linux-cve-announce/2024051731-CVE-2024-35838-d072@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35838
https://www.cve.org/CVERecord?id=CVE-2024-35838

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-17T14:02:36.410Z

Updated: 2024-08-02T03:21:49.012Z

Reserved: 2024-05-17T13:50:33.104Z

Link: CVE-2024-35838

Vulnrichment

Updated: 2024-08-02T03:21:49.012Z

NVD

Status : Awaiting Analysis

Published: 2024-05-17T14:15:20.940

Modified: 2024-05-17T18:35:35.070

Link: CVE-2024-35838

Redhat

Severity : Low

Publid Date: 2024-05-17T00:00:00Z

Links: CVE-2024-35838 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35838", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-17T13:50:33.104Z", "datePublished": "2024-05-17T14:02:36.410Z", "dateUpdated": "2024-08-02T03:21:49.012Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:29:52.746Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix potential sta-link leak\n\nWhen a station is allocated, links are added but not\nset to valid yet (e.g. during connection to an AP MLD),\nwe might remove the station without ever marking links\nvalid, and leak them. Fix that."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/sta_info.c"], "versions": [{"version": "cb71f1d136a6", "lessThan": "49aaeb8c539b", "status": "affected", "versionType": "git"}, {"version": "cb71f1d136a6", "lessThan": "587c58929761", "status": "affected", "versionType": "git"}, {"version": "cb71f1d136a6", "lessThan": "e04bf59bdba0", "status": "affected", "versionType": "git"}, {"version": "cb71f1d136a6", "lessThan": "b01a74b3ca6f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["net/mac80211/sta_info.c"], "versions": [{"version": "6.0", "status": "affected"}, {"version": "0", "lessThan": "6.0", "status": "unaffected", "versionType": "custom"}, {"version": "6.1.76", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.6.15", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.7.3", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "custom"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1"}, {"url": "https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034"}, {"url": "https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9"}, {"url": "https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26"}], "title": "wifi: mac80211: fix potential sta-link leak", "x_generator": {"engine": "bippy-a5840b7849dd"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-17T17:39:07.857159Z", "id": "CVE-2024-35838", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:42:37.524Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:49.012Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:49.012Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35838", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-17T17:39:07.857159Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-17T17:39:08.882Z"}}], "cna": {"title": "wifi: mac80211: fix potential sta-link leak", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cb71f1d136a6", "lessThan": "49aaeb8c539b", "versionType": "git"}, {"status": "affected", "version": "cb71f1d136a6", "lessThan": "587c58929761", "versionType": "git"}, {"status": "affected", "version": "cb71f1d136a6", "lessThan": "e04bf59bdba0", "versionType": "git"}, {"status": "affected", "version": "cb71f1d136a6", "lessThan": "b01a74b3ca6f", "versionType": "git"}], "programFiles": ["net/mac80211/sta_info.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.0"}, {"status": "unaffected", "version": "0", "lessThan": "6.0", "versionType": "custom"}, {"status": "unaffected", "version": "6.1.76", "versionType": "custom", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.15", "versionType": "custom", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.3", "versionType": "custom", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/mac80211/sta_info.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1"}, {"url": "https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034"}, {"url": "https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9"}, {"url": "https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26"}], "x_generator": {"engine": "bippy-a5840b7849dd"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix potential sta-link leak\n\nWhen a station is allocated, links are added but not\nset to valid yet (e.g. during connection to an AP MLD),\nwe might remove the station without ever marking links\nvalid, and leak them. Fix that."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-05-29T05:29:52.746Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35838", "state": "PUBLISHED", "dateUpdated": "2024-08-02T03:21:49.012Z", "dateReserved": "2024-05-17T13:50:33.104Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-17T14:02:36.410Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}