CVE-2024-35789 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

2024-05-1712:24:42

Linux

raw.githubusercontent.com

mac80211

vlan changes

use-after-free

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

When moving a station out of a VLAN and deleting the VLAN afterwards, the
fast_rx entry still holds a pointer to the VLAN’s netdev, which can cause
use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx
after the VLAN change.