PT-2025-3623

CVE-2024-57898

·

Published

2024-11-21

·

Updated

2026-10-18

Description by

CVSS 4.0
4.8
Medium
MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns the Linux kernel's wifi functionality, specifically the cfg80211 module. During link deletion, the link ID is removed from the valid links bitmap before cleanup operations, which causes problems for functions like cfg80211 cac event() that require the link ID to remain in the bitmap. This results in a WARN ON() being triggered. The flow of functions involved includes nl80211 remove link(), cfg80211 remove link(), ieee80211 del intf link(), ieee80211 vif set links(), ieee80211 vif update links(), ieee80211 link stop(), and cfg80211 cac event().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-62705
AZL-68573
CLSA-2026-1789898700
ECHO-A225-C31A-FB58
INFSA-2025_6966
RHSA-2025:6966
RHSA-2025_6966
USN-7379-1
USN-7379-2
USN-7380-1
USN-7381-1
USN-7382-1
USN-7513-1
USN-7513-2
USN-7513-3
USN-7513-4
USN-7513-5
USN-7514-1
USN-7515-1
USN-7515-2
USN-7522-1
USN-7523-1
USN-7524-1
Found an issue in the description? Have something to add? Feel free to write us 👾