CVE-2024-58061
kernel: wifi: mac80211: prohibit deactivating all links
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · March 6, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: prohibit deactivating all links
In the internal API this calls this is a WARN_ON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugfs write directly.
Statement
This vulnerability is rated as Moderate severity because exploitation requires local access with administrative permissions to write to debugfs interfaces, limiting the blast radius to a denial of service without compromising data confidentiality or system integrity. On Red Hat Enterprise Linux, access to the debugfs filesystem is restricted to privileged users by default, and typical enterprise server environments do not deploy wireless networking hardware running the mac80211 stack. Consequently, the flaw presents minimal exposure under standard server configurations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-20 · Improper Input Validation