{
  "cveId": "CVE-2024-26896",
  "url": "https://patchblox.com/security/cve/CVE-2024-26896",
  "summary": "CVE-2024-26896 is fixed in linux on 1 platform, first by DEBIAN-CVE-2024-26896, released April 17, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: wfx: fix memory leak when starting AP  Kme...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  wifi: wfx: fix memory leak when starting AP  Kmemleak reported this error:      unreferenced object 0xd73d1180 (size 184):       comm \u0022wpa_supplicant\u0022, pid 1559, jiffies 13006305 (age 964.245s)       hex dump (first 32 bytes):         00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................         00 00 00 00 00 00 00 00 1e 00 01 00 00 00 00 00  ................       backtrace:         [\u003C5ca11420\u003E] kmem_cache_alloc\u002B0x20c/0x5ac         [\u003C127bdd74\u003E] __alloc_skb\u002B0x144/0x170         [\u003Cfb8a5e38\u003E] __netdev_alloc_skb\u002B0x50/0x180         [\u003C0f9fa1d5\u003E] __ieee80211_beacon_get\u002B0x290/0x4d4 [mac80211]         [\u003C7accd02d\u003E] ieee80211_beacon_get_tim\u002B0x54/0x18c [mac80211]         [\u003C41e25cc3\u003E] wfx_start_ap\u002B0xc8/0x234 [wfx]         [\u003C93a70356\u003E] ieee80211_start_ap\u002B0x404/0x6b4 [mac80211]         [\u003Ca4a661cd\u003E] nl80211_start_ap\u002B0x76c/0x9e0 [cfg80211]         [\u003C47bd8b68\u003E] genl_rcv_msg\u002B0x198/0x378         [\u003C453ef796\u003E] netlink_rcv_skb\u002B0xd0/0x130         [\u003C6b7c977a\u003E] genl_rcv\u002B0x34/0x44         [\u003C66b2d04d\u003E] netlink_unicast\u002B0x1b4/0x258         [\u003Cf965b9b6\u003E] netlink_sendmsg\u002B0x1e8/0x428         [\u003Caadb8231\u003E] ____sys_sendmsg\u002B0x1e0/0x274         [\u003Cd2b5212d\u003E] ___sys_sendmsg\u002B0x80/0xb4         [\u003C69954f45\u003E] __sys_sendmsg\u002B0x64/0xa8     unreferenced object 0xce087000 (size 1024):       comm \u0022wpa_supplicant\u0022, pid 1559, jiffies 13006305 (age 964.246s)       hex dump (first 32 bytes):         00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................         10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............       backtrace:         [\u003C9a993714\u003E] __kmalloc_track_caller\u002B0x230/0x600         [\u003Cf83ea192\u003E] kmalloc_reserve.constprop.0\u002B0x30/0x74         [\u003Ca2c61343\u003E] __alloc_skb\u002B0xa0/0x170         [\u003Cfb8a5e38\u003E] __netdev_alloc_skb\u002B0x50/0x180         [\u003C0f9fa1d5\u003E] __ieee80211_beacon_get\u002B0x290/0x4d4 [mac80211]         [\u003C7accd02d\u003E] ieee80211_beacon_get_tim\u002B0x54/0x18c [mac80211]         [\u003C41e25cc3\u003E] wfx_start_ap\u002B0xc8/0x234 [wfx]         [\u003C93a70356\u003E] ieee80211_start_ap\u002B0x404/0x6b4 [mac80211]         [\u003Ca4a661cd\u003E] nl80211_start_ap\u002B0x76c/0x9e0 [cfg80211]         [\u003C47bd8b68\u003E] genl_rcv_msg\u002B0x198/0x378         [\u003C453ef796\u003E] netlink_rcv_skb\u002B0xd0/0x130         [\u003C6b7c977a\u003E] genl_rcv\u002B0x34/0x44         [\u003C66b2d04d\u003E] netlink_unicast\u002B0x1b4/0x258         [\u003Cf965b9b6\u003E] netlink_sendmsg\u002B0x1e8/0x428         [\u003Caadb8231\u003E] ____sys_sendmsg\u002B0x1e0/0x274         [\u003Cd2b5212d\u003E] ___sys_sendmsg\u002B0x80/0xb4  However, since the kernel is build optimized, it seems the stack is not accurate. It appears the issue is related to wfx_set_mfp_ap(). The issue is obvious in this function: memory allocated by ieee80211_beacon_get() is never released. Fixing this leak makes kmemleak happy.",
  "published": "2024-04-17T11:15:10Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00225,
  "epssPercentile": 0.13243,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.85-1",
      "fix": "DEBIAN-CVE-2024-26896",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26896",
      "released": "2024-04-17T11:15:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.7.12-1",
      "fix": "DEBIAN-CVE-2024-26896",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26896",
      "released": "2024-04-17T11:15:10Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.7.12-1",
      "fix": "DEBIAN-CVE-2024-26896",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-26896",
      "released": "2024-04-17T11:15:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}