CVE-2024-26779

Katalog CVE

CVSS 8.8 · High EPSS 0,28%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel, debian linux. Skor CVSS 3.1 8.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has been uploaded to the driver, otherwise it could end up passing the not-yet-uploaded sta via drv_tx calls to the driver, leading to potential crashes because of uninitialized drv_priv data. Add a missing sta->uploaded check and re-check fast xmit after inserting a sta.

Rincian

Terbit di NVD

3 April 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber CNA
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 19,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/281280276b70c822f55ce15b661f6d1d3228aaa9 patch
• https://git.kernel.org/stable/c/54b79d8786964e2f840e8a2ec4a9f9a50f3d4954 patch
• https://git.kernel.org/stable/c/5ffab99e070b9f8ae0cf60c3c3602b84eee818dd patch
• https://git.kernel.org/stable/c/76fad1174a0cae6fc857b9f88b261a2e4f07d587 patch
• https://git.kernel.org/stable/c/85720b69aef177318f4a18efbcc4302228a340e5 patch
• https://git.kernel.org/stable/c/88c18fd06608b3adee547102505d715f21075c9d patch
• https://git.kernel.org/stable/c/bcbc84af1183c8cf3d1ca9b78540c2185cd85e7f patch
• https://git.kernel.org/stable/c/eb39bb548bf974acad7bd6780fe11f9e6652d696 patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html mailing list