
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2024-35789 is a vulnerability in the Linux kernel's Wi-Fi subsystem (mac80211) discovered and disclosed on May 17, 2024. The vulnerability affects the VLAN handling functionality in the Linux kernel's wireless networking stack (NVD).
The vulnerability occurs when moving a station out of a VLAN and deleting the VLAN afterwards. In this scenario, the fast_rx entry still maintains a pointer to the VLAN's netdev, which can lead to use-after-free bugs. The fix involves immediately calling ieee80211_check_fast_rx after the VLAN change (Kernel Commit).
The vulnerability can result in use-after-free bugs in the Linux kernel's wireless networking stack, potentially leading to system instability or crashes (NVD).
The vulnerability requires access to a system with wireless networking capabilities and the ability to manipulate VLAN configurations. It was reported by ranygh@riseup.net and fixed in the Linux kernel (Kernel Commit).
The vulnerability has been fixed in various Linux kernel versions. Ubuntu has released patches for multiple kernel versions including 6.8.0-35.35 for 24.04 LTS, 5.15.0-116.126 for 22.04 LTS, and 5.4.0-189.209 for 20.04 LTS (Ubuntu). Debian has also released fixes in version 5.10.216-1~deb10u1 (Debian).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."