Riskcovery

CVE-2024-26779

wifi: mac80211: fix race condition on enabling fast-xmit

State
Published
Severity
8.8 High
Published
Apr 3, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix race condition on enabling fast-xmit

fast-xmit must only be enabled after the sta has been uploaded to the driver, otherwise it could end up passing the not-yet-uploaded sta via drv_tx calls to the driver, leading to potential crashes because of uninitialized drv_priv data. Add a missing sta->uploaded check and re-check fast xmit after inserting a sta.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 76fad1174a0cae6fc857b9f88b261a2e4f07d587Affected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 85720b69aef177318f4a18efbcc4302228a340e5Affected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 5ffab99e070b9f8ae0cf60c3c3602b84eee818ddAffected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 88c18fd06608b3adee547102505d715f21075c9dAffected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before eb39bb548bf974acad7bd6780fe11f9e6652d696Affected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 54b79d8786964e2f840e8a2ec4a9f9a50f3d4954Affected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before 281280276b70c822f55ce15b661f6d1d3228aaa9Affected
  • 17c18bf880b2464851e5a2bca86521affc46c97e to before bcbc84af1183c8cf3d1ca9b78540c2185cd85e7fAffected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 4.19.308 through 4.19.*Not affected
  • 5.4.270 through 5.4.*Not affected
  • 5.10.211 through 5.10.*Not affected
  • 5.15.150 through 5.15.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.