CVE-2024-26693: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26693 affects the Linux kernel's iwlwifi driver, specifically related to a vulnerability in handling station data when running out of stations. The vulnerability was discovered and disclosed on April 3, 2024, affecting the Intel wireless firmware driver implementation (NVD).

The vulnerability occurs when a DoS tool injects numerous authentication frames, causing an AP crash. The root cause is that when the system runs out of stations in the firmware, it fails to add the station but doesn't return an error to mac80211. This causes mac80211 to incorrectly believe it has the station, setting sta_info::uploaded to 1. When ieee80211_find_sta_by_ifaddr() returns a valid station object without an initialized iwl_mvm_sta object, it leads to a crash during Rx operations on that station (Kernel Commit).

The vulnerability can result in a denial of service (DoS) condition through system crashes when an attacker injects authentication frames to exhaust station resources in the wireless access point (NVD).

The vulnerability can be exploited using a DoS tool that injects loads of authentication frames to trigger the crash condition in affected access points (Kernel Commit).

The issue has been patched in the Linux kernel with a fix that properly handles error conditions when running out of stations and prevents the crash in the iwl_mvm_is_dup() function. The fix includes additional checks for dup_data allocation and proper error handling (Kernel Commit).