PT-2024-21566 · Linux+6 · Linux Kernel+6

Ulrich Mohr · Published 2024-04-17 · Updated 2026-05-26 · CVE-2024-26896

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak has been identified in the Linux kernel when starting an Access Point (AP). The issue is related to the wfx set mfp ap() function, where memory allocated by ieee80211 beacon get() is never released. This leak was reported by Kmemleak. The stack trace shows the involvement of several functions, including kmem cache alloc(), alloc skb(), netdev alloc skb(), and ieee80211 beacon get(). Fixing this leak resolves the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Memory Leak

Weakness Enumeration

CWE-125

CWE-401

Related Identifiers

AZL-58915

BDU:2025-13346

CVE-2024-26896

OESA-2024-1622

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

SUSE-SU-2024:1644-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

USN-7829-1

USN-7829-2

USN-7829-3

USN-7829-4

USN-7829-5

USN-7829-6

USN-7933-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1053

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26896.json · Exploit
• https://ubuntu.com/security/CVE-2024-35798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26816 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38335 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26870 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26874 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-23307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27032 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27058 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-26828 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:1659-1 · Vendor Advisory