Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

Linux kernel Wi‑Fi driver can leave connection info behind

CVE-2024-35838 · published 2 years ago
Summary

The Wi‑Fi part of the Linux kernel may not fully clean up internal data when a device disconnects before the connection is fully established, causing a memory leak. Over time this can use extra memory and affect system stability. Install the latest kernel updates that contain the fix.

What to do
  • Update linux kernel to version 6.7.3.
  • Update debian linux to version 6.1.76-1.
  • Update debian linux to version 6.7.7-1.
Affected software
Ecosystem VendorProductAffected versions
Linux linux kernel >= 6.7.0, < 6.7.3
Fix: upgrade to 6.7.3
Debian:12 debian linux < 6.1.76-1
Fix: upgrade to 6.1.76-1
Debian:13 debian linux < 6.7.7-1
Fix: upgrade to 6.7.7-1
– linux linux_kernel >= 6.0, < 6.1.76
>= 6.2, < 6.6.15
>= 6.7, < 6.7.3
6.8
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Original advisory text
wifi: mac80211: fix potential sta-link leak
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential sta-link leak When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them. Fix that.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-401Memory Leak
Timeline
Published17 May 2024
Updated4 Nov 2026
First seen12 Mar 2026
Sources
CVE-2024-35838 · OSV
CVE-2024-35838 · NVD
DEBIAN-CVE-2024-35838 · OSV
Track software like this
Free during beta