IT

Tracker / CVE-2024-50235

CVE-2024-50235

High 7.8

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear wdev->cqm_config pointer on free When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free.

Affected products and versions

linux linux_kernel
linux linux_kernel · 6.1.57 → 6.1.116
linux linux_kernel · 6.5.7 → 6.6
linux linux_kernel · 6.6 → 6.6.60
linux linux_kernel · 6.7 → 6.11.7

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References