What is CVE-2024-53074?

CVE-2024-53074 is a medium-severity vulnerability in Linux, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 5.5/10. Published 2024-11-19.

How severe is CVE-2024-53074?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Linux

CVE-2024-53074

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API (9260 and down). On those devices, we couldn't start the AP again after the AP has been already started and stopped.

EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions a8b5d4809b503da668966a8187b9872e6c85291c, 6.9, 0
Linux Linux_kernel — versions 6.12

Weakness classification (CWE)

CWE-772 — Missing Release of Resource after Effective Lifetime

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-53074?: CVE-2024-53074 is a medium-severity vulnerability in Linux, classified under Missing Release of Resource after Effective Lifetime. CVSS score: 5.5/10. Published 2024-11-19.
How severe is CVE-2024-53074?: Medium severity. CVSS v3 base score is 5.5 out of 10.