CVE-2024-53074

wifi: iwlwifi: mvm: don't leak a link on AP removal

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Nov 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: don't leak a link on AP removal

Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-772 Missing Release of Resource after Effective Lifetime

Affected Products

Product	Versions
LinuxLinux	a8b5d4809b503da668966a8187b9872e6c85291c to before 70ddf9ce1894c48dbbf10b0de51a95e4fb3dd376Affected a8b5d4809b503da668966a8187b9872e6c85291c to before 3ed092997a004d68a3a5b0eeb94e71b69839d0f7Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.11.7 through 6.11.*Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.