CVE-2024-53074: wifi: iwlwifi: mvm: don't leak a link on AP removal
In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: don't leak a link on AP removal
Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53074?
The severity of CVE-2024-53074 is considered to be moderate due to its potential impact on devices not supporting the MLD API.
How do I fix CVE-2024-53074?
To fix CVE-2024-53074, update the Linux kernel to a patched version version above 6.11.7 or 6.12-rc6.
Which versions of the Linux kernel are affected by CVE-2024-53074?
CVE-2024-53074 affects Linux kernel versions from 6.9 to 6.11.7 and specific releases of 6.12 rc1 to rc6.
What does CVE-2024-53074 affect?
CVE-2024-53074 affects the iwlwifi driver related to the management of links during access point removal.
Is CVE-2024-53074 a local or remote vulnerability?
CVE-2024-53074 is primarily a local vulnerability affecting devices that manage Wi-Fi connections.