What’s Vulnerable › Vulnerabilities

CVE-2024-26666: wifi: mac80211: fix RCU use in TDLS fast-xmit

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-02 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix RCU use in TDLS fast-xmit This looks up the link under RCU protection, but isn't guaranteed to actually have protection. Fix that.

Affected products

• Linux kernel: from 6.5 before 6.6.17; from 6.7 before 6.7.5; 6.8-rc1, 6.8-rc2, 6.8-rc3 — fixed in 6.6.17, 6.7.5

How to fix

Upgrade to a fixed version: Linux kernel 6.6.17, 6.7.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd
• https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad
• https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb
• https://git.kernel.org/stable/c/9480adfe4e0f0319b9da04b44e4eebd5ad07e0cd
• https://git.kernel.org/stable/c/c255c3b653c6e8b52ac658c305e2fece2825f7ad
• https://git.kernel.org/stable/c/fc3432ae8232ff4025e7c55012dd88db0e3d18eb

Get alerted when CVE-2024-26666 or the next vulnerability affects your stack