CVE-2024-35789

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35789
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx after the VLAN change.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc Patch
https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 Patch
https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 Patch
https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b Patch
https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 Patch
https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f Patch
https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb Patch
https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e Patch
https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 Patch
https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc Patch
https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 Patch
https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 Patch
https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b Patch
https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 Patch
https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f Patch
https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb Patch
https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e Patch
https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:rc8:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

23 Dec 2025, 18:45

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.12:rc8:*:*:*:*:*:*
CWE CWE-416
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc - () https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc - Patch
References () https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 - () https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 - Patch
References () https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 - () https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 - Patch
References () https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b - () https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b - Patch
References () https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 - () https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 - Patch
References () https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f - () https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f - Patch
References () https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb - () https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb - Patch
References () https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e - () https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e - Patch
References () https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 - () https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html - Third Party Advisory
First Time Linux
Debian
Debian debian Linux
Linux linux Kernel

21 Nov 2024, 09:20

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
References () https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc - () https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc -
References () https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 - () https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685 -
References () https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 - () https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7 -
References () https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b - () https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b -
References () https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 - () https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931 -
References () https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f - () https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f -
References () https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb - () https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb -
References () https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e - () https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e -
References () https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 - () https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921 -

05 Nov 2024, 10:16

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

27 Jun 2024, 12:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mac80211: comprobar/borrar fast rx para cambios de VLAN que no sean 4addr sta Al mover una estación fuera de una VLAN y eliminar la VLAN después, la entrada fast_rx todavía contiene un puntero a netdev de la VLAN, lo que puede causar errores de uso después de la liberación. Solucione este problema llamando inmediatamente a ieee80211_check_fast_rx después del cambio de VLAN.

17 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-17 13:15

Updated : 2025-12-23 18:45

NVD link : CVE-2024-35789

Mitre link : CVE-2024-35789

CVE.ORG link : CVE-2024-35789

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-416

Use After Free