What’s Vulnerable › Vulnerabilities

CVE-2024-50237: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-09 · updated 2026-08-04
• Weakness: CWE-908

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data

Affected products

• Linux kernel: from 3.19 before 4.19.323; from 4.20 before 5.4.285; from 5.5 before 5.10.229; from 5.11 before 5.15.171; from 5.16 before 6.1.116; from 6.2 before 6.6.60 — fixed in 4.19.323, 5.10.229, 5.15.171, 5.4.285, 6.1.116, 6.11.7

How to fix

Upgrade to a fixed version: Linux kernel 4.19.323, 5.10.229, 5.15.171, 5.4.285. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/393b6bc174b0dd21bb2a36c13b36e62fc3474a23
• https://git.kernel.org/stable/c/3ccf525a73d48e814634847f6d4a6150c6f0dffc
• https://git.kernel.org/stable/c/78b698fbf37208ee921ee4cedea75b5d33d6ea9f
• https://git.kernel.org/stable/c/8f6cd4d5bb7406656835a90e4f1a2192607f0c21
• https://git.kernel.org/stable/c/b0b862aa3dbcd16b3c4715259a825f48ca540088
• https://git.kernel.org/stable/c/b2bcbe5450b20641f512d6b26c6b256a5a4f847f
• https://git.kernel.org/stable/c/c21efba8b5a86537ccdf43f77536bad02f82776c
• https://git.kernel.org/stable/c/ee35c423042c9e04079fdee3db545135d609d6ea
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
• https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

Get alerted when CVE-2024-50237 or the next vulnerability affects your stack