Clear wdev->cqm_config pointer on free to prevent double-free in Linux kernel

CVE-2024-50235

What is CVE-2024-50235?

The Linux kernel has a vulnerability within the wifi configuration mechanism that concerns the cqm_config pointer. When unregistering a wireless device, the pointer is not being cleared, leading to the potential for double-free vulnerabilities during subsequent registrations in another network namespace. This flaw can occur if the same wdev/netdev structure is re-registered and then destroyed, which can lead to serious security implications if exploited.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References