PT-2025-8779 · Linux+1 · Linux Kernel+1

Alexis Lothoré · Published 2025-01-10 · Updated 2025-10-23 · CVE-2024-57992

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version containing the fix for the issue described

Description A specific error path in probe functions in wilc drivers can lead to a kernel panic. This issue is due to a recent change decoupling wiphy allocation from wiphy registration, but the wilc netdev cleanup function has not been updated accordingly, allowing it to possibly call wiphy unregister on a wiphy that has never been registered. The issue can be reproduced by not wiring a wilc device correctly through SPI, making it unresponsive to early SPI commands.

Recommendations To resolve the issue, move wiphy unregister and wiphy free out of wilc netdev cleanup, and adjust error paths in both drivers. As a temporary workaround, consider disabling the wilc netdev cleanup function until a patch is available. Restrict access to the vulnerable wilc1000 module to minimize the risk of exploitation. Avoid using the wilc1000 driver with SPI devices that are not properly wired until the issue is resolved.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2026-03901

CVE-2024-57992

Affected Products

Astra Linux

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/57xxx/CVE-2024-57992.json · Exploit
• https://cve.org/CVERecord?id=CVE-2024-57992 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-57992 · Security Note
• https://ubuntu.com/security/CVE-2024-57992 · Vendor Advisory
• https://git.kernel.org/stable/c/c7115b8229f3e6cdfae43b1cdd180f5b6c67cd70 · Patch
• https://bdu.fstec.ru/vul/2026-03901 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-57992 · Vendor Advisory
• https://git.kernel.org/stable/c/1be94490b6b8a06ff14cd23fda8714e6ec37cdfb · Patch
• https://osv.dev/vulnerability/CVE-2024-57992 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13.2 · Note
• https://t.me/cveNotify/140048 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1895622636744348124 · Twitter Post
• https://lore.kernel.org/linux-cve-announce/2025022639-CVE-2024-57992-fa9c@gregkh · Note
• https://git.kernel.org/linus/1be94490b6b8a06ff14cd23fda8714e6ec37cdfb · Note