8

CVE-2024-35789: debian debian_linux Use After Free

CVSS: 8.0v3.1HighModified
AliasesUBUNTU-CVE-2024-35789DEBIAN-CVE-2024-35789
Published 17-05-2024Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2024-35789 is a high (CVSS 8.0) Use After Free vulnerability in debian debian_linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 27.6% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.0/10
010
High · v3.1 (CVE.org)
EPSS score
0.36%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 56 · Related 47
DLA-3840-1DLA-3842-1RHSA-2024:4211RHSA-2024:4352RHSA-2024:5065RHSA-2024:5363

Timeline

  1. 17-05-2024
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx after the VLAN change.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

0.00 pp

From 0.36% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu118 products
  • linuxAll versions (No fix recorded) | < 5.4.0-189.209 | < 5.15.0-116.126 | < 6.8.0-35.35
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.4.0-1128.138 | < 5.15.0-1065.71 | < 6.8.0-1009.9
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
Linux2 products
  • linux≥ a7f1721684628b8ae6015bca9a176046ee6f30cc, < ea9a0cfc07a7d3601cc680718d9cff0d6927a921 | ≥ bd7e90c82850f49c23004d54de14e46d373748a6, < be1dd9254fc115321d6fbee042026d42afc8d931 | ≥ cc413b375c6d95e68a4629cb1ba9d099de78ebb9, < e8b067c4058c0121ac8ca71559df8e2e08ff1a7e | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < c8bddbd91bc8e42c961a5e2cec20ab879f21100f | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < 7eeabcea79b67cc29563e6a9a5c81f9e2c664d5b | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < 6b948b54c8bd620725e0c906e44b10c0b13087a7 | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < 2884a50f52313a7a911de3afcad065ddbb3d78fc | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < e8678551c0243f799b4859448781cbec1bd6f1cb | ≥ dd0b45538146cb6a54d6da7663b8c3afd16ebcfd, < 4f2bdb3c5e3189297e156b3ff84b140423d64685 | 22bc2a4814440c4a8979a381f46fec5d224f5c11 | 7cfe824f681e1aaac34ea64bb4def8a77801b672 | ≥ 4.19.189, < 4.19.312 | ≥ 5.4.114, < 5.4.274 | ≥ 5.10.32, < 5.10.215 | ≥ 4.14.232, < 4.15 | ≥ 5.11.16, < 5.12 | 5.12
  • linux_kernelEOL≥ 4.14.232, < 4.15 | ≥ 4.19.189, < 4.19.312 | ≥ 5.4.114, < 5.4.274 | ≥ 5.10.32, < 5.10.215 | ≥ 5.11.16, < 5.12 | ≥ 5.12.1, < 5.15.154 | ≥ 5.16, < 6.1.84 | ≥ 6.2, < 6.6.24 | ≥ 6.7, < 6.7.12 | ≥ 6.8, < 6.8.3 | 5.12 | 5.12:rc7 | 5.12:rc8 | 6.9:rc1

3 vendors · 122 products

References

34 links
Show all 34 references