In the Linux kernel, the following vulnerability has been resolved:
cfg80211: fix management registrations locking
The management registrations locking was broken, the list was locked for each wdev, but cfg80211_mgmt_registrations_update() iterated it without holding all the correct spinlocks, causing list corruption.
Rather than trying to fix it with fine-grained locking, just move the lock to the wiphy/rdev (still need the list on each wdev), we already need to hold the wdev lock to change it, so there's no contention on the lock in any case. This trivially fixes the bug since we hold one wdev's lock already, and now will hold the lock that protects all lists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-amazon | Aug 9, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub