CVE-2024-26895

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-26895
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26895.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-26895
Downstream
Related
Published
2024-04-17T10:27:46Z
Modified
2025-10-14T14:34:31.950766Z
Summary
wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces

wilcnetdevcleanup currently triggers a KASAN warning, which can be observed on interface registration error path, or simply by removing the module/unbinding device from driver:

echo spi0.1 > /sys/bus/spi/drivers/wilc1000_spi/unbind

================================================================== BUG: KASAN: slab-use-after-free in wilcnetdevcleanup+0x508/0x5cc Read of size 4 at addr c54d1ce8 by task sh/86

CPU: 0 PID: 86 Comm: sh Not tainted 6.8.0-rc1+ #117 Hardware name: Atmel SAMA5 unwindbacktrace from showstack+0x18/0x1c showstack from dumpstacklvl+0x34/0x58 dumpstacklvl from printreport+0x154/0x500 printreport from kasanreport+0xac/0xd8 kasanreport from wilcnetdevcleanup+0x508/0x5cc wilcnetdevcleanup from wilcbusremove+0xc8/0xec wilcbusremove from spiremove+0x8c/0xac spiremove from devicereleasedriverinternal+0x434/0x5f8 devicereleasedriverinternal from unbindstore+0xbc/0x108 unbindstore from kernfsfopwriteiter+0x398/0x584 kernfsfopwriteiter from vfswrite+0x728/0xf88 vfswrite from ksyswrite+0x110/0x1e4 ksyswrite from retfast_syscall+0x0/0x1c

[...]

Allocated by task 1: kasansavetrack+0x30/0x5c _kasankmalloc+0x8c/0x94 _kmallocnode+0x1cc/0x3e4 kvmallocnode+0x48/0x180 allocnetdevmqs+0x68/0x11dc allocetherdevmqs+0x28/0x34 wilcnetdevifcinit+0x34/0x8ec wilccfg80211init+0x690/0x910 wilcbusprobe+0xe0/0x4a0 spiprobe+0x158/0x1b0 reallyprobe+0x270/0xdf4 _driverprobedevice+0x1dc/0x580 driverprobedevice+0x60/0x140 _driverattach+0x228/0x5d4 busforeachdev+0x13c/0x1a8 busadddriver+0x2a0/0x608 driverregister+0x24c/0x578 dooneinitcall+0x180/0x310 kernelinitfreeable+0x424/0x484 kernelinit+0x20/0x148 retfromfork+0x14/0x28

Freed by task 86: kasansavetrack+0x30/0x5c kasansavefreeinfo+0x38/0x58 _kasanslabfree+0xe4/0x140 kfree+0xb0/0x238 devicerelease+0xc0/0x2a8 kobjectput+0x1d4/0x46c netdevruntodo+0x8fc/0x11d0 wilcnetdevcleanup+0x1e4/0x5cc wilcbusremove+0xc8/0xec spiremove+0x8c/0xac devicereleasedriverinternal+0x434/0x5f8 unbindstore+0xbc/0x108 kernfsfopwriteiter+0x398/0x584 vfswrite+0x728/0xf88 ksyswrite+0x110/0x1e4 retfastsyscall+0x0/0x1c [...]

David Mosberger-Tan initial investigation [1] showed that this use-after-free is due to netdevice unregistration during vif list traversal. When unregistering a net device, since the needsfreenetdev has been set to true during registration, the netdevice object is also freed, and as a consequence, the corresponding vif object too, since it is attached to it as private netdevice data. The next occurrence of the loop then tries to access freed vif pointer to the list to move forward in the list.

Fix this use-after-free thanks to two mechanisms: - navigate in the list with listforeachentrysafe, which allows to safely modify the list as we go through each element. For each element, remove it from the list with listdelrcu - make sure to wait for RCU grace period end after each vif removal to make sure it is safe to free the corresponding vif too (through unregister_netdev)

Since we are in a RCU "modifier" path (not a "reader" path), and because such path is expected not to be concurrent to any other modifier (we are using the vifmutex lock), we do not need to use RCU list API, that's why we can benefit from listforeachentry_safe.

[1] https://lore.kernel.org/linux-wireless/ab077dbe58b1ea5de0a3b2ca21f275a07af967d2.camel@egauge.net/

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
5956f4203b6cdd0755bbdd21b45f3933c7026208
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
fe20e3d56bc911408fc3c27a17c59e9d7885f7d1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
a9545af2a533739ffb64d6c9a6fec6f13e2b505f
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
3da9d32b7f4a1a9f7e4bb15bb82f2b2dd6719447
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
24228dcf1d30c2231caa332be7d3090ac59fbfe9
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
73a2aa0aef86c2c07be5a2f42c9e6047e1a2f7bb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8399918f3056e1033f0f4c08eab437fb38d6f22d
Fixed
cb5942b77c05d54310a0420cac12935e9b6aa21c

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.10.1
v5.10.10
v5.10.100
v5.10.101
v5.10.102
v5.10.103
v5.10.104
v5.10.105
v5.10.106
v5.10.107
v5.10.108
v5.10.109
v5.10.11
v5.10.110
v5.10.111
v5.10.112
v5.10.113
v5.10.114
v5.10.115
v5.10.116
v5.10.117
v5.10.118
v5.10.119
v5.10.12
v5.10.120
v5.10.121
v5.10.122
v5.10.123
v5.10.124
v5.10.125
v5.10.126
v5.10.127
v5.10.128
v5.10.129
v5.10.13
v5.10.130
v5.10.131
v5.10.132
v5.10.133
v5.10.134
v5.10.135
v5.10.136
v5.10.137
v5.10.138
v5.10.139
v5.10.14
v5.10.140
v5.10.141
v5.10.142
v5.10.143
v5.10.144
v5.10.145
v5.10.146
v5.10.147
v5.10.148
v5.10.149
v5.10.15
v5.10.150
v5.10.151
v5.10.152
v5.10.153
v5.10.154
v5.10.155
v5.10.156
v5.10.157
v5.10.158
v5.10.159
v5.10.16
v5.10.160
v5.10.161
v5.10.162
v5.10.163
v5.10.164
v5.10.165
v5.10.166
v5.10.167
v5.10.168
v5.10.169
v5.10.17
v5.10.170
v5.10.171
v5.10.172
v5.10.173
v5.10.174
v5.10.175
v5.10.176
v5.10.177
v5.10.178
v5.10.179
v5.10.18
v5.10.180
v5.10.181
v5.10.182
v5.10.183
v5.10.184
v5.10.185
v5.10.186
v5.10.187
v5.10.188
v5.10.189
v5.10.19
v5.10.190
v5.10.191
v5.10.192
v5.10.193
v5.10.194
v5.10.195
v5.10.196
v5.10.197
v5.10.198
v5.10.199
v5.10.2
v5.10.20
v5.10.200
v5.10.201
v5.10.202
v5.10.203
v5.10.204
v5.10.205
v5.10.206
v5.10.207
v5.10.208
v5.10.209
v5.10.21
v5.10.210
v5.10.211
v5.10.212
v5.10.213
v5.10.22
v5.10.23
v5.10.24
v5.10.25
v5.10.26
v5.10.27
v5.10.28
v5.10.29
v5.10.3
v5.10.30
v5.10.31
v5.10.32
v5.10.33
v5.10.34
v5.10.35
v5.10.36
v5.10.37
v5.10.38
v5.10.39
v5.10.4
v5.10.40
v5.10.41
v5.10.42
v5.10.43
v5.10.44
v5.10.45
v5.10.46
v5.10.47
v5.10.48
v5.10.49
v5.10.5
v5.10.50
v5.10.51
v5.10.52
v5.10.53
v5.10.54
v5.10.55
v5.10.56
v5.10.57
v5.10.58
v5.10.59
v5.10.6
v5.10.60
v5.10.61
v5.10.62
v5.10.63
v5.10.64
v5.10.65
v5.10.66
v5.10.67
v5.10.68
v5.10.69
v5.10.7
v5.10.70
v5.10.71
v5.10.72
v5.10.73
v5.10.74
v5.10.75
v5.10.76
v5.10.77
v5.10.78
v5.10.79
v5.10.8
v5.10.80
v5.10.81
v5.10.82
v5.10.83
v5.10.84
v5.10.85
v5.10.86
v5.10.87
v5.10.88
v5.10.89
v5.10.9
v5.10.90
v5.10.91
v5.10.92
v5.10.93
v5.10.94
v5.10.95
v5.10.96
v5.10.97
v5.10.98
v5.10.99
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.15.1
v5.15.10
v5.15.100
v5.15.101
v5.15.102
v5.15.103
v5.15.104
v5.15.105
v5.15.106
v5.15.107
v5.15.108
v5.15.109
v5.15.11
v5.15.110
v5.15.111
v5.15.112
v5.15.113
v5.15.114
v5.15.115
v5.15.116
v5.15.117
v5.15.118
v5.15.119
v5.15.12
v5.15.120
v5.15.121
v5.15.122
v5.15.123
v5.15.124
v5.15.125
v5.15.126
v5.15.127
v5.15.128
v5.15.129
v5.15.13
v5.15.130
v5.15.131
v5.15.132
v5.15.133
v5.15.134
v5.15.135
v5.15.136
v5.15.137
v5.15.138
v5.15.139
v5.15.14
v5.15.140
v5.15.141
v5.15.142
v5.15.143
v5.15.144
v5.15.145
v5.15.146
v5.15.147
v5.15.148
v5.15.149
v5.15.15
v5.15.150
v5.15.151
v5.15.152
v5.15.16
v5.15.17
v5.15.18
v5.15.19
v5.15.2
v5.15.20
v5.15.21
v5.15.22
v5.15.23
v5.15.24
v5.15.25
v5.15.26
v5.15.27
v5.15.28
v5.15.29
v5.15.3
v5.15.30
v5.15.31
v5.15.32
v5.15.33
v5.15.34
v5.15.35
v5.15.36
v5.15.37
v5.15.38
v5.15.39
v5.15.4
v5.15.40
v5.15.41
v5.15.42
v5.15.43
v5.15.44
v5.15.45
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.5
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.6
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.7
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.78
v5.15.79
v5.15.8
v5.15.80
v5.15.81
v5.15.82
v5.15.83
v5.15.84
v5.15.85
v5.15.86
v5.15.87
v5.15.88
v5.15.89
v5.15.9
v5.15.90
v5.15.91
v5.15.92
v5.15.93
v5.15.94
v5.15.95
v5.15.96
v5.15.97
v5.15.98
v5.15.99
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.4
v5.4-rc2
v5.4-rc3
v5.4-rc4
v5.4-rc5
v5.4-rc6
v5.4-rc7
v5.4-rc8
v5.5
v5.5-rc1
v5.5-rc2
v5.5-rc3
v5.5-rc4
v5.5-rc5
v5.5-rc6
v5.5-rc7
v5.6
v5.6-rc1
v5.6-rc2
v5.6-rc3
v5.6-rc4
v5.6-rc5
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2024-26895-035df9e8",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24228dcf1d30c2231caa332be7d3090ac59fbfe9",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-131ebfd5",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb5942b77c05d54310a0420cac12935e9b6aa21c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-3a25281d",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3da9d32b7f4a1a9f7e4bb15bb82f2b2dd6719447",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-4e915e76",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73a2aa0aef86c2c07be5a2f42c9e6047e1a2f7bb",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-50dfdce9",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9545af2a533739ffb64d6c9a6fec6f13e2b505f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-aa10aea2",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@24228dcf1d30c2231caa332be7d3090ac59fbfe9",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-b179782d",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe20e3d56bc911408fc3c27a17c59e9d7885f7d1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-d1a3b049",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a9545af2a533739ffb64d6c9a6fec6f13e2b505f",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-d4c47e07",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5956f4203b6cdd0755bbdd21b45f3933c7026208",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 909.0,
                "function_hash": "19716465793901158836496891767497358029"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-e59f9b34",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5956f4203b6cdd0755bbdd21b45f3933c7026208",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "57277909068159045840280246387267433678"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-f27672c3",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73a2aa0aef86c2c07be5a2f42c9e6047e1a2f7bb",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-f64ab47e",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cb5942b77c05d54310a0420cac12935e9b6aa21c",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        },
        {
            "id": "CVE-2024-26895-fa70a07c",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3da9d32b7f4a1a9f7e4bb15bb82f2b2dd6719447",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Function",
            "digest": {
                "length": 876.0,
                "function_hash": "184170868007947513299061955721792709337"
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c",
                "function": "wilc_netdev_cleanup"
            }
        },
        {
            "id": "CVE-2024-26895-fedc3260",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fe20e3d56bc911408fc3c27a17c59e9d7885f7d1",
            "deprecated": false,
            "signature_version": "v1",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "284394452511692111777399063791588405357",
                    "101629875103842613718285645692777072719",
                    "159175989107151323644827344844404184294",
                    "210803092192449919263722268113153482828",
                    "293423714129370706415587245554695155388",
                    "167393478404361880800789174813728660498",
                    "281379288313647498462066373911004656656",
                    "262639807287073160814356699645419952705",
                    "182580608640005269113572088136712729838",
                    "12890404644712676466320381892257459349",
                    "33659968339954232022891256857574205888",
                    "139178791177342570740669194531551300383",
                    "1132588136750619343178957944986720861",
                    "170897085779639017460845399915664941182",
                    "20068624694680464122779972212044177780",
                    "277744083199415426947239623126522131585",
                    "156191802247595926559676834628252428552",
                    "140689579479335926325551688966986607298",
                    "202998312116177187624894025747984007338",
                    "22621085117047122531657033581617674652",
                    "107280012131320951421215412646033611613",
                    "258098285392112239423514498736062267323",
                    "248025731567376780305470060383811004167",
                    "293127002560626151728384193533682191564",
                    "275547090781790412407101175633930256476",
                    "128381582623075665694054650677420214699",
                    "2045133245190130438050749415870309843",
                    "3732500879013549366805953559774923251",
                    "324060912231377383510142699537376204131",
                    "32152206211755422144283999632162742884"
                ]
            },
            "target": {
                "file": "drivers/net/wireless/microchip/wilc1000/netdev.c"
            }
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.214
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.153
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.83
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.23
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.11
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.2