{"id":"DEBIAN-CVE-2024-26896","details":"In the Linux kernel, the following vulnerability has been resolved:  wifi: wfx: fix memory leak when starting AP  Kmemleak reported this error:      unreferenced object 0xd73d1180 (size 184):       comm \"wpa_supplicant\", pid 1559, jiffies 13006305 (age 964.245s)       hex dump (first 32 bytes):         00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................         00 00 00 00 00 00 00 00 1e 00 01 00 00 00 00 00  ................       backtrace:         [\u003c5ca11420\u003e] kmem_cache_alloc+0x20c/0x5ac         [\u003c127bdd74\u003e] __alloc_skb+0x144/0x170         [\u003cfb8a5e38\u003e] __netdev_alloc_skb+0x50/0x180         [\u003c0f9fa1d5\u003e] __ieee80211_beacon_get+0x290/0x4d4 [mac80211]         [\u003c7accd02d\u003e] ieee80211_beacon_get_tim+0x54/0x18c [mac80211]         [\u003c41e25cc3\u003e] wfx_start_ap+0xc8/0x234 [wfx]         [\u003c93a70356\u003e] ieee80211_start_ap+0x404/0x6b4 [mac80211]         [\u003ca4a661cd\u003e] nl80211_start_ap+0x76c/0x9e0 [cfg80211]         [\u003c47bd8b68\u003e] genl_rcv_msg+0x198/0x378         [\u003c453ef796\u003e] netlink_rcv_skb+0xd0/0x130         [\u003c6b7c977a\u003e] genl_rcv+0x34/0x44         [\u003c66b2d04d\u003e] netlink_unicast+0x1b4/0x258         [\u003cf965b9b6\u003e] netlink_sendmsg+0x1e8/0x428         [\u003caadb8231\u003e] ____sys_sendmsg+0x1e0/0x274         [\u003cd2b5212d\u003e] ___sys_sendmsg+0x80/0xb4         [\u003c69954f45\u003e] __sys_sendmsg+0x64/0xa8     unreferenced object 0xce087000 (size 1024):       comm \"wpa_supplicant\", pid 1559, jiffies 13006305 (age 964.246s)       hex dump (first 32 bytes):         00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................         10 00 07 40 00 00 00 00 00 00 00 00 00 00 00 00  ...@............       backtrace:         [\u003c9a993714\u003e] __kmalloc_track_caller+0x230/0x600         [\u003cf83ea192\u003e] kmalloc_reserve.constprop.0+0x30/0x74         [\u003ca2c61343\u003e] __alloc_skb+0xa0/0x170         [\u003cfb8a5e38\u003e] __netdev_alloc_skb+0x50/0x180         [\u003c0f9fa1d5\u003e] __ieee80211_beacon_get+0x290/0x4d4 [mac80211]         [\u003c7accd02d\u003e] ieee80211_beacon_get_tim+0x54/0x18c [mac80211]         [\u003c41e25cc3\u003e] wfx_start_ap+0xc8/0x234 [wfx]         [\u003c93a70356\u003e] ieee80211_start_ap+0x404/0x6b4 [mac80211]         [\u003ca4a661cd\u003e] nl80211_start_ap+0x76c/0x9e0 [cfg80211]         [\u003c47bd8b68\u003e] genl_rcv_msg+0x198/0x378         [\u003c453ef796\u003e] netlink_rcv_skb+0xd0/0x130         [\u003c6b7c977a\u003e] genl_rcv+0x34/0x44         [\u003c66b2d04d\u003e] netlink_unicast+0x1b4/0x258         [\u003cf965b9b6\u003e] netlink_sendmsg+0x1e8/0x428         [\u003caadb8231\u003e] ____sys_sendmsg+0x1e0/0x274         [\u003cd2b5212d\u003e] ___sys_sendmsg+0x80/0xb4  However, since the kernel is build optimized, it seems the stack is not accurate. It appears the issue is related to wfx_set_mfp_ap(). The issue is obvious in this function: memory allocated by ieee80211_beacon_get() is never released. Fixing this leak makes kmemleak happy.","modified":"2026-09-15T09:03:05.765156436Z","published":"2024-04-17T11:15:10.727Z","upstream":["CVE-2024-26896"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-26896"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.85-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26896.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26896.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.12-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-26896.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}