In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: fix potential key use-after-free
When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, but still better to fix, do that by returning an error code and converting that to success on the cfg80211 boundary only, leaving the error for bad callers of ieee80211_gtk_rekey_add().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernelUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade perf | Aug 12, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 23, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Mar 2, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Mar 2, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 24, 2024 | Mar 2, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfo | Aug 22, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-azure-baseUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-preemptUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-default | Mar 13, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-225-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-107-generic-64kUpgrade linux-image-5.4.0-1109-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1131-awsUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1130-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1037-iotUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1045-gkeopUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1162-gcpUpgrade linux-image-5.15.0-107-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1059-kvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1072-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-254-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1124-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1177-azureUpgrade linux-image-5.15.0-107-lowlatency-64kUpgrade linux-image-5.4.0-1092-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-225-genericUpgrade linux-image-5.4.0-1044-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1055-ibmUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-182-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-4.15.0-1152-kvmUpgrade linux-image-5.15.0-107-genericUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1062-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-182-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-182-lowlatencyUpgrade linux-image-4.4.0-1169-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1125-awsUpgrade linux-image-4.15.0-1131-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1129-gcpUpgrade linux-image-5.15.0-1055-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1168-awsUpgrade linux-image-5.15.0-1064-azureUpgrade linux-image-4.4.0-254-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1132-kvmUpgrade linux-image-5.15.0-1059-gkeUpgrade linux-image-5.15.0-1060-gcpUpgrade linux-image-5.15.0-1055-nvidia-lowlatencyUpgrade linux-image-5.4.0-1085-bluefieldUpgrade linux-image-5.15.0-1064-azure-fdeUpgrade linux-image-5.15.0-107-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1113-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1055-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvm | May 20, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub