Read-After-Free Vulnerability in Linux Kernel's ath12k WLAN Driver

CVE-2024-57995

What is CVE-2024-57995?

A read-after-free vulnerability exists in the ath12k WLAN driver within the Linux kernel. This issue arises when an arbitrary virtual interface (arvif) is assigned to a different radio and subsequently gets deleted. During the deletion, the arvif pointer is freed, leading to a situation where a check involving the arvif pointer can result in accessing invalid memory. The issue has been resolved by adjusting the order of operations to ensure that the pointer check occurs after it is properly reassigned, thus eliminating the risk of unintended memory access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References