CVE-2024-50235

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-50235
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50235.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50235
Downstream
Related
Published
2024-11-09T10:14:45.222Z
Modified
2025-11-28T02:34:29.785354Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
wifi: cfg80211: clear wdev->cqm_config pointer on free
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: clear wdev->cqm_config pointer on free

When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50235.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c797498e860e9a435a651bbf0789433684ce6dd8
Fixed
ba392e1355ba74b1d4fa11b85f71ab6ed7ecc058
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
37c20b2effe987b806c8de6d12978e4ffeff026f
Fixed
6c44abb2d4c3262737d5d67832daebc8cf48b8c9
Fixed
64e4c45d23cd7f6167f69cc2d2877bc7f54292e5
Fixed
d5fee261dfd9e17b08b1df8471ac5d5736070917
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
32fb9b7d98c3e586bddfb978d383aa8d2b1211bc

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.116
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.60
Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.11.7