PT-2025-3624 · Linux+4 · Linux Kernel+4
Published
2024-11-25
·
Updated
2026-05-26
·
CVE-2024-57899
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.74
Description
The issue is related to the wifi mac80211 component in the Linux kernel, where the size of an unsigned long is 4 bytes on 32-bit systems, while a u64 is 8 bytes. This leads to incorrect bit finding when using
or each set bit(bit, &bits, sizeof(changed) * BITS PER BYTE). The solution involves ensuring the size of the bits variable is correctly adjusted for each architecture. A call trace is provided, showing the sequence of function calls leading to the issue, including ieee80211 link info change notify, report bug, and handle bug.Recommendations
To resolve the issue, update to Linux kernel version 6.6.74 or later. As a temporary workaround, consider restricting the use of the wifi mac80211 component on 32-bit systems until a patch is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu