CVE Catalog

CVE-2024-58061

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.17%

7th percentile - higher than 7% of all known CVEs

Summary

In the Linux kernel, a vulnerability in the mac80211 subsystem allows deactivating all links via the debugfs interface, triggering a WARN_ON that indicates an internal bug.

Risk Assessment

The risk involves potential disruption of Wi-Fi network operation due to incorrect link configuration, which could lead to system crashes or unexpected behavior.

Recommendation

It is recommended to immediately update the Linux kernel to a version containing the fix that prevents deactivating all links via debugfs.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARN_ON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugfs write directly.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS