CVE-2024-47718: wifi: rtw88: always wait for both firmware loading attempts
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw88: always wait for both firmware loading attempts
In 'rtwwaitfirmwarecompletion()', always wait for both (regular and wowlan) firmware loading attempts. Otherwise if 'rtwusbintfinit()' has failed in 'rtwusbprobe()', 'rtwusbdisconnect()' may issue 'ieee80211freehw()' when one of 'rtwloadfirmwarecb()' (usually the wowlan one) is still in progress, causing UAF detected by KASAN.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47718?
CVE-2024-47718 has been classified with a severity rating based on its potential impact on Linux kernel users.
How do I fix CVE-2024-47718?
To fix CVE-2024-47718, update your Linux kernel to one of the recommended versions that address this vulnerability.
Which versions of Linux kernel are affected by CVE-2024-47718?
CVE-2024-47718 affects Linux kernel versions between 5.6 and up to 6.11.2, as specified in the advisory.
What components are involved in CVE-2024-47718?
The components involved in CVE-2024-47718 are related to the firmware loading mechanisms in the wifi driver for the Linux kernel.
Are there any specific distributions impacted by CVE-2024-47718?
Yes, specific Debian distributions are impacted, and users should monitor updates from their package maintainers.