CVE-2024-47673: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
First published: Wed Oct 09 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING. bad state = 0 WARNING: CPU: 2 PID: 17434 at drivers/net/wireless/intel/iwlwifi/iwl-trans.c:115 iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi] RIP: 0010:iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi] Call Trace: <TASK> iwl_mvm_send_cmd+0x40/0xc0 [iwlmvm] iwl_mvm_config_scan+0x198/0x260 [iwlmvm] iwl_mvm_recalc_tcm+0x730/0x11d0 [iwlmvm] iwl_mvm_tcm_work+0x1d/0x30 [iwlmvm] process_one_work+0x29e/0x640 worker_thread+0x2df/0x690 ? rescuer_thread+0x540/0x540 kthread+0x192/0x1e0 ? set_kthread_struct+0x90/0x90 ret_from_fork+0x22/0x30
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | <6.1.112 | |
| Linux Kernel | >=6.2<6.6.53 | |
| Linux Kernel | >=6.7<6.10.12 | |
| Linux Kernel | =6.11-rc1 | |
| Linux Kernel | =6.11-rc2 | |
| Linux Kernel | =6.11-rc3 | |
| Linux Kernel | =6.11-rc4 | |
| Linux Kernel | =6.11-rc5 | |
| debian/linux | <=5.10.223-1<=5.10.234-1 | 6.1.129-1 6.1.135-1 6.12.22-1 6.12.25-1 |
| debian/linux-6.1 | 6.1.129-1~deb11u1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0668ebc8c2282ca1e7eb96092a347baefffb5fe7
- https://git.kernel.org/stable/c/2c61b561baf92a2860c76c2302a62169e22c21cc
- https://git.kernel.org/stable/c/55086c97a55d781b04a2667401c75ffde190135c
- https://git.kernel.org/stable/c/5948a191906b54e10f02f6b7a7670243a39f99f4
- https://git.kernel.org/stable/c/a15df5f37fa3a8b7a8ec7a339d1e897bc524e28f
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-47673
- https://nvd.nist.gov/vuln/detail/CVE-2024-47673
- https://launchpad.net/bugs/cve/CVE-2024-47673
- https://security-tracker.debian.org/tracker/CVE-2024-47673
- https://ubuntu.com/security/CVE-2024-47673
- https://git.kernel.org/linus/0668ebc8c2282ca1e7eb96092a347baefffb5fe7
Frequently Asked Questions
What is the severity of CVE-2024-47673?
CVE-2024-47673 is classified with a moderate severity due to potential system instability caused by a host command being sent during firmware downtime.
How do I fix CVE-2024-47673?
To fix CVE-2024-47673, update the Linux kernel to version 6.1.123-1, 6.1.119-1, 6.12.11-1, or 6.12.12-1.
Which versions of Linux kernel are affected by CVE-2024-47673?
CVE-2024-47673 affects various versions of the Linux kernel including versions between 6.2 and 6.6.53 and versions between 6.7 and 6.10.12.
Is CVE-2024-47673 a hardware or software vulnerability?
CVE-2024-47673 is a software vulnerability within the Linux kernel affecting systems utilizing the iwlwifi driver.
What should I do if my system is affected by CVE-2024-47673?
If your system is affected by CVE-2024-47673, immediately apply the necessary kernel updates to mitigate the issue.
- agent/title
- agent/first-publish-date
- agent/type
- agent/severity
- agent/remedy
- agent/author
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/trending
- agent/source
- collector/usn-cve
- source/Ubuntu
- agent/description
- agent/event
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/tags
- agent/softwarecombine
- collector/security-tracker-debian
- source/Debian
- vendor/linux
- canonical/linux kernel
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.11-rc1
- version/linux kernel/6.11-rc2
- version/linux kernel/6.11-rc3
- version/linux kernel/6.11-rc4
- version/linux kernel/6.11-rc5
- package-manager/debian