CVE-2024-57898 wifi: cfg80211: clear link ID from bitmap during link delete after clean up
A logic error in the Linux kernel WiFi subsystem causes a kernel warning and potential crash during link deletion, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-57898?
CVE-2024-57898 is a low-severity vulnerability in Linux kernel, published on 15 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: clear link ID from bitmap during link delete after clean up
Currently, during link deletion, the link ID is first removed from the valid_links bitmap before performing any clean-up operations. However, some functions require the link ID to remain in the valid_links bitmap. One such example is cfg80211_cac_event(). The flow is -
nl80211_remove_link() cfg80211_remove_link() ieee80211_del_intf_link() ieee80211_vif_set_links() ieee80211_vif_update_links() ieee80211_link_stop() cfg80211_cac_event()
cfg80211_cac_event() requires link ID to be present but it is cleared already in cfg80211_remove_link(). Ultimately, WARN_ON() is hit.
Therefore, clear the link ID from the bitmap only after completing the link clean-up.
Which versions are affected by CVE-2024-57898?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-57898?
Apply the vendor's patch.
Is CVE-2024-57898 being exploited?
There is no known exploitation of CVE-2024-57898 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as AZL-62705, AZL-68573, BELL-CVE-2024-57898, DEBIAN-CVE-2024-57898, GHSA-9w4x-56rq-p7vj, ROOT-OS-DEBIAN-11-CVE-2024-57898 and 3 more.