CVE-2024-35789

CVE-2024-35789 is a vulnerability in the Linux kernel’s Wi-Fi subsystem (mac80211). It occurs when a station is moved out of a VLAN, and the VLAN is subsequently deleted. A reference to the deleted VLAN’s network device may remain, leading to a use-after-free condition. This can result in system instability or crashes. The issue has been resolved by ensuring that outdated references are cleared when a station changes VLANs.

This vulnerability is rated as having a Moderate impact because exploitation requires local administrative or network configuration privileges to reassign wireless stations between virtual local area networks (VLANs), limiting exposure in enterprise environments. Standard Red Hat Enterprise Linux server deployments rarely configure wireless networking or Wi-Fi access point VLAN operations, significantly minimizing the attack surface. An attacker with appropriate local access could trigger this flaw to induce a kernel crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.