cve/2024/CVE-2024-57898.md

### [CVE-2024-57898](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-57898)
![](https://img.shields.io/static/v1?label=Product&message=Linux&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2%3C%20ae07daf440d3220d0986e676317a5da66e4f9dfd%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

In the Linux kernel, the following vulnerability has been resolved:wifi: cfg80211: clear link ID from bitmap during link delete after clean upCurrently, during link deletion, the link ID is first removed from thevalid_links bitmap before performing any clean-up operations. However, somefunctions require the link ID to remain in the valid_links bitmap. Onesuch example is cfg80211_cac_event(). The flow is -nl80211_remove_link()    cfg80211_remove_link()        ieee80211_del_intf_link()            ieee80211_vif_set_links()                ieee80211_vif_update_links()                    ieee80211_link_stop()                        cfg80211_cac_event()cfg80211_cac_event() requires link ID to be present but it is clearedalready in cfg80211_remove_link(). Ultimately, WARN_ON() is hit.Therefore, clear the link ID from the bitmap only after completing the linkclean-up.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/oogasawa/Utility-security