CVE-2024-58061

low-risk
Published 2025-03-06

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prohibit deactivating all links In the internal API this calls this is a WARN_ON, but that should remain since internally we want to know about bugs that may cause this. Prevent deactivating all links in the debugfs write directly.

Do I need to act?

-
0.05% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (6)

Patch https://git.kernel.org/stable/c/18100796c11dfdea9101fdc95d2428b2093477ee
Patch https://git.kernel.org/stable/c/270ad6776e7cf1be3b769e0447070f9d0e8269db
Patch https://git.kernel.org/stable/c/7553477cbfd784b128297f9ed43751688415bbaa
Patch https://git.kernel.org/stable/c/d36e48a4d81c647df8a76cc58fd4d2442ba10744
Patch https://git.kernel.org/stable/c/dfe9a043300261afe5eadc07b867a6810c4e999a
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal