CVE-2024-35838
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-35838
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35838.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-35838
- Downstream
- Related
- Published
- 2024-05-17T14:02:36Z
- Modified
- 2025-10-21T21:08:20.749396Z
- Summary
- wifi: mac80211: fix potential sta-link leak
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix potential sta-link leak
When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them. Fix that.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/49aaeb8c539b1633b3bd7c2df131ec578aa1eae1
- https://git.kernel.org/stable/c/587c5892976108674bbe61a8ff659de279318034
- https://git.kernel.org/stable/c/b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26
- https://git.kernel.org/stable/c/e04bf59bdba0fa45d52160be676114e16be855a9
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcb71f1d136a635decf43c3b502ee34fb05640fcdFixed49aaeb8c539b1633b3bd7c2df131ec578aa1eae1
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcb71f1d136a635decf43c3b502ee34fb05640fcdFixed587c5892976108674bbe61a8ff659de279318034
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcb71f1d136a635decf43c3b502ee34fb05640fcdFixede04bf59bdba0fa45d52160be676114e16be855a9
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcb71f1d136a635decf43c3b502ee34fb05640fcdFixedb01a74b3ca6fd51b62c67733ba7c3280fa6c5d26
Affected versions
v5.*
v5.19
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v6.*
v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.2
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.2
Database specific
vanir_signatures
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e04bf59bdba0fa45d52160be676114e16be855a9",
"target": {
"function": "sta_info_free",
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-3a55fb51",
"signature_version": "v1",
"digest": {
"length": 837.0,
"function_hash": "10420231869513451586754074937587760289"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@587c5892976108674bbe61a8ff659de279318034",
"target": {
"function": "sta_info_free",
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-44b72c9f",
"signature_version": "v1",
"digest": {
"length": 837.0,
"function_hash": "10420231869513451586754074937587760289"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26",
"target": {
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-458d16d2",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42845000331177614182878206193695647375",
"33055588476907906502830529878900359684",
"84761617109652550622237369723712492638",
"286865920487654176806701600828482902138"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49aaeb8c539b1633b3bd7c2df131ec578aa1eae1",
"target": {
"function": "sta_info_free",
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-508a8599",
"signature_version": "v1",
"digest": {
"length": 871.0,
"function_hash": "237105058212159587423415766988171177904"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e04bf59bdba0fa45d52160be676114e16be855a9",
"target": {
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-7bf0f47f",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42845000331177614182878206193695647375",
"33055588476907906502830529878900359684",
"84761617109652550622237369723712492638",
"286865920487654176806701600828482902138"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26",
"target": {
"function": "sta_info_free",
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-93c3e86d",
"signature_version": "v1",
"digest": {
"length": 837.0,
"function_hash": "10420231869513451586754074937587760289"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@587c5892976108674bbe61a8ff659de279318034",
"target": {
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-a0d583aa",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42845000331177614182878206193695647375",
"33055588476907906502830529878900359684",
"84761617109652550622237369723712492638",
"286865920487654176806701600828482902138"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49aaeb8c539b1633b3bd7c2df131ec578aa1eae1",
"target": {
"file": "net/mac80211/sta_info.c"
},
"deprecated": false,
"id": "CVE-2024-35838-eabbc507",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"42845000331177614182878206193695647375",
"33055588476907906502830529878900359684",
"84761617109652550622237369723712492638",
"286865920487654176806701600828482902138"
]
},
"signature_type": "Line"
}
]