3.3

CVE-2024-57898: linux

CVSS: 3.3v3.1LowAnalyzed
AliasesUBUNTU-CVE-2024-57898DEBIAN-CVE-2024-57898
Published 15-01-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2024-57898 is a low (CVSS 3.3) vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 7.4% of scored vulnerabilities.

Overall risk
13/100
0100
Low · default modelHow is this calculated?
CVSS score
3.3/10
010
Low · v3.1 (NVD)
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 16
RHSA-2025:6966USN-7379-1USN-7381-1USN-7382-1USN-7513-1USN-7513-2

Timeline

  1. 15-01-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear link ID from bitmap during link delete after clean up Currently, during link deletion, the link ID is first removed from the valid_links bitmap before performing any clean-up operations. However, some functions require the link ID to remain in the valid_links bitmap. One such example is cfg80211_cac_event(). The flow is - nl80211_remove_link() cfg80211_remove_link() ieee80211_del_intf_link() ieee80211_vif_set_links() ieee80211_vif_update_links() ieee80211_link_stop() cfg80211_cac_event() cfg80211_cac_event() requires link ID to be present but it is cleared already in cfg80211_remove_link(). Ultimately, WARN_ON() is hit. Therefore, clear the link ID from the bitmap only after completing the link clean-up.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu83 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Linux2 products
  • linux≥ d74380ee99b59a2e46612c12c85e701ab213f4ea, < ae07daf440d3220d0986e676317a5da66e4f9dfd | ≥ d74380ee99b59a2e46612c12c85e701ab213f4ea, < b5c32ff6a3a38c74facdd1fe34c0d709a55527fd | 6.12
  • linux_kernel< 6.12.9 | 6.13:rc1 | 6.13:rc2
Debian1 product
  • linux< 6.12.9-1

3 vendors · 86 products

References

22 links
Show all 22 references