CVE-2024-47672: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
First published: Wed Oct 09 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead There is a WARNING in iwl_trans_wait_tx_queues_empty() (that was recently converted from just a message), that can be hit if we wait for TX queues to become empty after firmware died. Clearly, we can't expect anything from the firmware after it's declared dead. Don't call iwl_trans_wait_tx_queues_empty() in this case. While it could be a good idea to stop the flow earlier, the flush functions do some maintenance work that is not related to the firmware, so keep that part of the code running even when the firmware is not running. [edit commit message]
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | >=5.10.227<6.1.112 | |
| Linux Kernel | >=6.2<6.6.53 | |
| Linux Kernel | >=6.7<6.10.12 | |
| Linux Kernel | =6.11-rc1 | |
| Linux Kernel | =6.11-rc2 | |
| Linux Kernel | =6.11-rc3 | |
| Linux Kernel | =6.11-rc4 | |
| Linux Kernel | =6.11-rc5 | |
| debian/linux | <=5.10.223-1<=5.10.226-1 | 6.1.123-1 6.1.128-1 6.12.12-1 6.12.15-1 |
| debian/linux-6.1 | 6.1.119-1~deb11u1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/16c1e5d5228f26f120e12e6ca55c59c3a5e6dece
- https://git.kernel.org/stable/c/1afed66cb271b3e65fe9df1c9fba2bf4b1f55669
- https://git.kernel.org/stable/c/1b0cd832c9607f41f84053b818e0b7908510a3b9
- https://git.kernel.org/stable/c/3a84454f5204718ca5b4ad2c1f0bf2031e2403d1
- https://git.kernel.org/stable/c/4d0a900ec470d392476c428875dbf053f8a0ae5e
- https://git.kernel.org/stable/c/7188b7a72320367554b76d8f298417b070b05dd3
- https://git.kernel.org/stable/c/ad2fcc2daa203a6ad491f00e9ae3b7867e8fe0f3
- https://git.kernel.org/stable/c/de46b1d24f5f752b3bd8b46673c2ea4239661244
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47672
- https://nvd.nist.gov/vuln/detail/CVE-2024-47672
- https://launchpad.net/bugs/cve/CVE-2024-47672
- https://security-tracker.debian.org/tracker/CVE-2024-47672
- https://ubuntu.com/security/CVE-2024-47672
- https://git.kernel.org/linus/3a84454f5204718ca5b4ad2c1f0bf2031e2403d1
Frequently Asked Questions
What is CVE-2024-47672?
CVE-2024-47672 is a vulnerability in the Linux kernel's iwlwifi driver that triggers warnings when waiting for transmission queues if the firmware becomes unresponsive.
What is the severity of CVE-2024-47672?
The severity of CVE-2024-47672 is categorized as moderate due to potential disruptions in wireless communication.
How do I fix CVE-2024-47672?
To fix CVE-2024-47672, update your Linux kernel to a patched version such as 6.1.123-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-47672?
CVE-2024-47672 affects Linux kernel versions between 5.10.227 and 6.11-rc5, including specific releases within those ranges.
What are the consequences of not addressing CVE-2024-47672?
Failing to address CVE-2024-47672 may lead to warnings being displayed and potential issues with transmission in wireless communications.
- agent/title
- agent/type
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/tags
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.10.227
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.11-rc1
- version/linux kernel/6.11-rc2
- version/linux kernel/6.11-rc3
- version/linux kernel/6.11-rc4
- version/linux kernel/6.11-rc5
- package-manager/debian