CVE-2024-47713: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: use two-phase skb reclamation in ieee80211dostop()
Since 'devqueuexmit()' should be called with interrupts enabled, the following backtrace:
ieee80211dostop() ... spinlockirqsave(&local->queuestopreasonlock, flags) ... ieee80211freetxskb() ieee80211reportusedskb() ieee80211reportackskb() cfg80211mgmttxstatusext() nl80211frametxstatus() genlmsgmulticastnetns() genlmsgmulticastnetnsfiltered() nlmsgmulticastfiltered() netlinkbroadcastfiltered() doonebroadcast() netlinkbroadcastdeliver() netlinksendskb() netlinkdelivertap() netlinkdelivertapskb() devqueuexmit() devqueuexmit() ; with IRQS disabled ... spinunlockirqrestore(&local->queuestopreasonlock, flags)
issues the warning (as reported by syzbot reproducer):
WARNING: CPU: 2 PID: 5128 at kernel/softirq.c:362 localbhenableip+0xc3/0x120
Fix this by implementing a two-phase skb reclamation in 'ieee80211dostop()', where actual work is performed outside of a section with interrupts disabled.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: use two-phase skb reclamation in ieee80211dostop()
Since 'devqueuexmit()' should be called with interrupts enabled, the following backtrace:
ieee80211dostop() ... spinlockirqsave(&local->queuestopreasonlock, flags) ... ieee80211freetxskb() ieee80211reportusedskb() ieee80211reportackskb() cfg80211mgmttxstatusext() nl80211frametxstatus() genlmsgmulticastnetns() genlmsgmulticastnetnsfiltered() nlmsgmulticastfiltered() netlinkbroadcastfiltered() doonebroadcast() netlinkbroadcastdeliver() netlinksendskb() netlinkdelivertap() netlinkdelivertapskb() devqueuexmit() devqueuexmit() ; with IRQS disabled ... spinunlockirqrestore(&local->queuestopreasonlock, flags)
issues the warning (as reported by syzbot reproducer):
WARNING: CPU: 2 PID: 5128 at kernel/softirq.c:362 localbhenableip+0xc3/0x120
Fix this by implementing a two-phase skb reclamation in 'ieee80211dostop()', where actual work is performed outside of a section with interrupts disabled.
— NVD
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47713?
The severity of CVE-2024-47713 is currently classified as high due to its potential impact on system stability and security.
How do I fix CVE-2024-47713?
To fix CVE-2024-47713, update to the latest stable version of the Linux kernel, specifically versions 6.1.123-1, 6.1.128-1, or higher.
Which versions of the Linux kernel are affected by CVE-2024-47713?
CVE-2024-47713 affects Linux kernel versions between 2.6.32 and 6.10.13, including specific ranges within those versions.
What components are impacted by CVE-2024-47713 in the Linux kernel?
CVE-2024-47713 specifically impacts the mac80211 component of the Linux kernel, which is related to Wi-Fi functionalities.
Is CVE-2024-47713 actively being exploited?
At this time, there is no public report indicating that CVE-2024-47713 is actively being exploited in the wild.