High 8.0Published May 17, 2024

CVE-2024-35789wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

Updated under an hour ago (Oct 27, 2026, 6:00 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx after the VLAN change.

CVSS: 8.0 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from a7f1721684628b8ae6015bca9a176046ee6f30cc before ea9a0cfc07a7d3601cc680718d9cff0d6927a921; from bd7e90c82850f49c23004d54de14e46d373748a6 before be1dd9254fc115321d6fbee042026d42afc8d931; from cc413b375c6d95e68a4629cb1ba9d099de78ebb9 before e8b067c4058c0121ac8ca71559df8e2e08ff1a7e; from dd0b45538146cb6a54d6da7663b8c3afd16ebcfd before c8bddbd91bc8e42c961a5e2cec20ab879f21100f; from dd0b45538146cb6a54d6da7663b8c3afd16ebcfd before 7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b; from dd0b45538146cb6a54d6da7663b8c3afd16ebcfd before 6b948b54c8bd620725e0c906e44b10c0b13087a7; from dd0b45538146cb6a54d6da7663b8c3afd16ebcfd before 2884a50f52313a7a911de3afcad065ddbb3d78fc; from dd0b45538146cb6a54d6da7663b8c3afd16ebcfd before e8678551c0243f799b4859448781cbec1bd6f1cb; and 8 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.14.232 before 4.15; from 4.19.189 before 4.19.312; from 5.4.114 before 5.4.274; from 5.10.32 before 5.10.215; from 5.11.16 before 5.12; from 5.12.1 before 5.15.154; from 5.16 before 6.1.84; from 6.2 before 6.6.24; and 6 more ranges	NVD
debian debian_linux debian:debian_linux	10.0	NVD

References

References

https://git.kernel.org/stable/c/ea9a0cfc07a7d3601cc680718d9cff0d6927a921	patch
https://git.kernel.org/stable/c/be1dd9254fc115321d6fbee042026d42afc8d931	patch
https://git.kernel.org/stable/c/e8b067c4058c0121ac8ca71559df8e2e08ff1a7e	patch
https://git.kernel.org/stable/c/c8bddbd91bc8e42c961a5e2cec20ab879f21100f	patch
https://git.kernel.org/stable/c/7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b	patch
https://git.kernel.org/stable/c/6b948b54c8bd620725e0c906e44b10c0b13087a7	patch
https://git.kernel.org/stable/c/2884a50f52313a7a911de3afcad065ddbb3d78fc	patch
https://git.kernel.org/stable/c/e8678551c0243f799b4859448781cbec1bd6f1cb	patch
https://git.kernel.org/stable/c/4f2bdb3c5e3189297e156b3ff84b140423d64685	patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html	third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.