In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 d…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_link() is called by ieee80211_gtk_rekey_add() but returns 0 due to KRACK protection (identical key reinstall), ieee80211_gtk_rekey_add() will still return a pointer into the key, in a potential use-after-free. This normally doesn't happen since it's only called by iwlwifi in case of WoWLAN rekey offload which has its own KRACK protection, but still better to …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2408f491ff998d674707725eadc47d8930aced09 Patch
- https://git.kernel.org/stable/c/2f4e16e39e4f5e78248dd9e51276a83203950b36 Patch
- https://git.kernel.org/stable/c/31db78a4923ef5e2008f2eed321811ca79e7f71b Patch
- https://git.kernel.org/stable/c/65c72a7201704574dace708cbc96a8f367b1491d Patch
- https://git.kernel.org/stable/c/e8a834eb09bb95c2bf9c76f1a28ecef7d8c439d0 Patch
- https://git.kernel.org/stable/c/e8e599a635066c50ac214c3e10858f1d37e03022 Patch
- https://git.kernel.org/stable/c/2f4e16e39e4f5e78248dd9e51276a83203950b36 Patch
- https://git.kernel.org/stable/c/31db78a4923ef5e2008f2eed321811ca79e7f71b Patch
- https://git.kernel.org/stable/c/65c72a7201704574dace708cbc96a8f367b1491d Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
Timeline
- nvd_ingest NVD