In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: clear wdev->cqm_config pointer on free
When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 2, 2024 | Nov 9, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Nov 9, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04c | Feb 20, 2025 | Nov 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Nov 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub