Security readout for executives and security teams
Plain-English summary
A malformed Wi-Fi A-MSDU frame can make an affected Linux kernel read beyond the available packet data. A nearby, unauthenticated transmitter may be able to trigger confidentiality loss or system disruption without user interaction. The supplied CVSS score is 8.1, making this a high-priority issue for Linux devices with active wireless interfaces.
Executive priority
Treat this as a high-priority patching item for wireless-enabled Linux fleets, especially mobile endpoints and exposed appliances. It does not warrant an emergency response based solely on current evidence because active exploitation is not established, but adjacent, unauthenticated triggering and possible confidentiality or availability impact justify prompt remediation.
Technical view
The flaw is an out-of-bounds read in Linux cfg80211 A-MSDU parsing. Code could infer another subframe existed without first confirming that its complete header was present. The stable-kernel changes add stricter length validation before processing the subframe. The supplied CVSS vector requires adjacent-network access and indicates potentially high confidentiality and availability impact.
Likely exposure
Exposure is most likely on Linux endpoints, appliances, and embedded systems using Wi-Fi with a vulnerable kernel. The supplied affected-version data is ambiguous and includes versions and commit identifiers with conflicting default statuses, so distribution package and backport status must be verified rather than inferred from version numbers alone.
Exploitation context
CISA KEV status is false, and the supplied sources do not establish active exploitation or a public working exploit. Exploitation would require adjacent-network reachability, consistent with a nearby malicious wireless transmitter. No privileges or user interaction are indicated by the supplied CVSS vector.
Researcher notes
The core condition is incomplete A-MSDU subframe-header validation leading to an out-of-bounds read before later rejection. Assessments should account for distribution backports and runtime wireless capability. The bundle does not identify the exact leaked data, crash behavior, practical exploit reliability, or affected driver combinations; those points require vendor-specific confirmation.
Mitigation direction
- Install the vendor-supported kernel update containing the applicable stable fix, then reboot into it.
- Check distribution security guidance because vendors may backport fixes without changing to an obvious upstream version.
- Prioritize wireless-enabled systems in public, shared, or otherwise untrusted radio environments.
- Where updating is delayed, disable unnecessary Wi-Fi interfaces and use trusted wired connectivity when operationally feasible.
Validation and detection
- Inventory running kernel and distribution package versions on every wireless-enabled Linux system.
- Confirm the installed package includes the relevant upstream fix or documented vendor backport.
- Verify systems rebooted into the updated kernel rather than retaining the vulnerable kernel in memory.
- Identify whether cfg80211 and wireless interfaces are present, enabled, and operational.
- Re-run authenticated vulnerability checks after updating and review vendor advisory mappings.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-35937 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.1 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H2.85.2LinuxVulnerability scoring details
Base CVSS 3.1 score
8.1HighVector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/9eb3bc0973d084423a6df21cf2c74692ff05647eCVE reference, Linux
- https://git.kernel.org/stable/c/5d7a8585fbb31e88fb2a0f581b70667d3300d1e9CVE reference, Linux
- https://git.kernel.org/stable/c/16da1e1dac23be45ef6e23c41b1508c400e6c544CVE reference, Linux
- https://git.kernel.org/stable/c/9ad7974856926129f190ffbe3beea78460b3b7ccCVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlCVE reference, CVE
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.