First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-35838

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: fix potential sta-link leak

When a station is allocated, links are added but not set to valid yet (e.g. during connection to an AP MLD), we might remove the station without ever marking links valid, and leak them. Fix that.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Linux	Linux	>= cb71f1d136a635decf43c3b502ee34fb05640fcd, < 49aaeb8c539b1633b3bd7c2df131ec578aa1eae1; >= cb71f1d136a635decf43c3b502ee34fb05640fcd, < 587c5892976108674bbe61a8ff659de279318034; >= cb71f1d136a635decf43c3b502ee34fb05640fcd, < e04bf59bdba0fa45d52160be676114e16be855a9; >= cb71f1d136a635decf43c3b502ee34fb05640fcd, < b01a74b3ca6fd51b62c67733ba7c3280fa6c5d26
Linux	Linux	6.0

References

Timeline

Published: May 17, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-358395.5In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: replace physindev with physinif in nf_bridge_info A CVE-2024-35847.5qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/uploa CVE-2024-358405.5In the Linux kernel, the following vulnerability has been resolved: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() subflow CVE-2024-358415.5In the Linux kernel, the following vulnerability has been resolved: net: tls, fix WARNIING in __sk_msg_free A splice with MSG_SPLICE_PAGES CVE-2024-358425.5In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Add NULL check for normal_link string It's CVE-2024-358438.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O CVE-2024-358445.5In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix reserve_cblocks counting error when out of space W CVE-2024-358459.1In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The iwl_fw_ini_debug_in CVE-2024-358465.5In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix shrinker NULL crash with cgroup_disable=memory Christia CVE-2024-358477.8In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent double free on error The error handling pa CVE-2024-358484.7In the Linux kernel, the following vulnerability has been resolved: eeprom: at24: fix memory corruption race condition If the eeprom is no CVE-2024-358497.1In the Linux kernel, the following vulnerability has been resolved: btrfs: fix information leak in btrfs_ioctl_logical_to_ino() Syzbot rep

CVE-2024-35838: Medium severity, CVSS 5.5 | Vulnix