CVE-2024-50235

A flaw was found in the Linux kernel's wifi: cfg80211 subsystem. A local attacker with administrative privileges could exploit this vulnerability. When a wireless device (wdev/netdev) is unregistered, its cqm_config pointer is freed but not cleared. If the same device is re-registered in another network namespace and subsequently destroyed, it leads to a double-free. This can result in a system crash (denial of service) or potentially allow for arbitrary code execution.

This issue is considered to be a moderate impact flaw, as the exploitation for this will need an ADMIN (or ROOT) privilege (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.