CVE-2024-47721: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtw89: remove unused C2H event ID RTW89MACC2HFUNCREADWOWCAM to prevent out-of-bounds reading
The handler of firmware C2H event RTW89MACC2HFUNCREADWOWCAM isn't implemented, but driver expects number of handlers is NUMOFRTW89MACC2HFUNCWOW causing out-of-bounds access. Fix it by removing ID.
Addresses-Coverity-ID: 1598775 ("Out-of-bounds read")
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Remove
Remove
Linux kernel (wifi: rtw89)from your environment.Remove the unused firmware C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM from the rtw89 driver to prevent out-of-bounds reading (the handler for this event is not implemented, but the driver expects the number of handlers to include it via NUM_OF_RTW89_MAC_C2H_FUNC_WOW).
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47721?
CVE-2024-47721 has a low severity since it involves an unused event ID that could lead to out-of-bounds reading.
How do I fix CVE-2024-47721?
To fix CVE-2024-47721, update your Linux kernel to versions 6.10.13 or later, or 6.11.2 or later.
Which Linux kernel versions are affected by CVE-2024-47721?
CVE-2024-47721 affects Linux kernel versions between 6.10 and 6.10.12, and between 6.11 and 6.11.1.
Is CVE-2024-47721 a remote vulnerability?
CVE-2024-47721 is not considered a remote vulnerability as it pertains to an internal kernel event handling.
What does CVE-2024-47721 involve in the Linux kernel?
CVE-2024-47721 involves the removal of an unused C2H event ID to prevent potential out-of-bounds reading issues.