• 公告ID (KylinSec-SA-2024-2691)

摘要:

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.

安全等级: Low

公告ID: KylinSec-SA-2024-2691

发布日期: 2024年6月13日

关联CVE: CVE-2024-35838  

  • 详细介绍

1. 漏洞描述

   

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not
set to valid yet (e.g. during connection to an AP MLD),
we might remove the station without ever marking links
valid, and leak them. Fix that.

2. 影响范围

cve名称 产品 组件 是否受影响
CVE-2024-35838 KY3.4-5A kernel Unaffected
CVE-2024-35838 KY3.5.2 kernel Unaffected
CVE-2024-35838 V6 kernel Unaffected

3. 影响组件

    无

4. 修复版本

    无

5. 修复方法

   无

6. 下载链接

    无
上一篇:KylinSec-SA-2024-2690 下一篇:KylinSec-SA-2024-2692