CVE-2024-50235

Source
https://cve.org/CVERecord?id=CVE-2024-50235
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50235.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-50235
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
MGASA (2)
OESA (1)
openSUSE (2)
RHSA (1)
SUSE (8)
UBUNTU (1)
Related
Published
2024-11-09T10:14:45Z
Modified
2026-10-20T10:30:52Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
wifi: cfg80211: clear wdev->cqm_config pointer on free
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: clear wdev->cqm_config pointer on free

When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50235.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c797498e860e9a435a651bbf0789433684ce6dd8
Fixed
ba392e1355ba74b1d4fa11b85f71ab6ed7ecc058
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
37c20b2effe987b806c8de6d12978e4ffeff026f
Fixed
6c44abb2d4c3262737d5d67832daebc8cf48b8c9
Fixed
64e4c45d23cd7f6167f69cc2d2877bc7f54292e5
Fixed
d5fee261dfd9e17b08b1df8471ac5d5736070917
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.1.57
Fixed
6.1.116
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.5.7
Fixed
6.6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
32fb9b7d98c3e586bddfb978d383aa8d2b1211bc

Affected versions

v6.*
v6.1.100
v6.1.101
v6.1.102
v6.1.103
v6.1.104
v6.1.105
v6.1.106
v6.1.107
v6.1.108
v6.1.109
v6.1.110
v6.1.111
v6.1.112
v6.1.113
v6.1.114
v6.1.115
v6.1.57
v6.1.58
v6.1.59
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.90
v6.1.91
v6.1.92
v6.1.93
v6.1.94
v6.1.95
v6.1.96
v6.1.97
v6.1.98
v6.1.99
v6.5.10
v6.5.11
v6.5.12
v6.5.13
v6.5.7
v6.5.8
v6.5.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50235.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.1.116
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.11.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50235.json"