CVE-2024-57898: wifi: cfg80211: clear link ID from bitmap during link delete after clean up
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: clear link ID from bitmap during link delete after clean up
Currently, during link deletion, the link ID is first removed from the validlinks bitmap before performing any clean-up operations. However, some functions require the link ID to remain in the validlinks bitmap. One such example is cfg80211cacevent(). The flow is -
nl80211removelink() cfg80211removelink() ieee80211delintflink() ieee80211vifsetlinks() ieee80211vifupdatelinks() ieee80211linkstop() cfg80211cacevent()
cfg80211cacevent() requires link ID to be present but it is cleared already in cfg80211removelink(). Ultimately, WARNON() is hit.
Therefore, clear the link ID from the bitmap only after completing the link clean-up.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57898?
CVE-2024-57898 has been classified with a severity rating that indicates a medium risk for potential exploitation in the Linux kernel.
How do I fix CVE-2024-57898?
To mitigate CVE-2024-57898, update your Linux kernel to the latest version where this vulnerability has been patched.
What versions of the Linux kernel are affected by CVE-2024-57898?
CVE-2024-57898 impacts specific versions of the Linux kernel prior to the release containing the fix.
What is the nature of the vulnerability in CVE-2024-57898?
CVE-2024-57898 involves an issue with the cfg80211 component of the Linux kernel that mishandles link ID during link deletion.
Has CVE-2024-57898 been exploited in the wild?
As of now, there have been no reported instances of CVE-2024-57898 being actively exploited in the wild.