CVE-2024-26666

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26666
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix RCU use in TDLS fast-xmit This looks up the link under RCU protection, but isn't guaranteed to actually have protection. Fix that.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd Patch
https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad Patch
https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb Patch
https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd Patch
https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad Patch
https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
History

08 Apr 2025, 19:24

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd - () https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd - Patch
References () https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad - () https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad - Patch
References () https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb - () https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

21 Nov 2024, 09:02

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd - () https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd -
References () https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad - () https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad -
References () https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb - () https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb -

04 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

02 Apr 2024, 12:50

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: wifi: mac80211: corrige el uso de RCU en TDLS fast-xmit Esto busca el enlace bajo protección de RCU, pero no se garantiza que realmente tenga protección. Arregla eso.

02 Apr 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-02 07:15

Updated : 2025-04-08 19:24

NVD link : CVE-2024-26666

Mitre link : CVE-2024-26666

CVE.ORG link : CVE-2024-26666

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo