CVE-2024-27056

CVE-2024-27056

High · published May 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: ensure offloading TID queue exists

The resume code path assumes that the TX queue for the offloading TID

has been configured. At resume time it then tries to sync the write

pointer as it may have been updated by the firmware.

In the unusual event that no packets have been send on TID 0, the queue

will not have been allocated and this causes a crash. Fix this by

ensuring the queue exist at suspend time.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00251 · 15.6th percentile
Published
2024-05-01T17:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel< 6.1.1326.1.132
linux/linux_kernel≥ 6.2, < 6.6.856.6.85
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (9)
EPSS history
Timeline
  • 01 MAY 12:54Z
    wifi: iwlwifi: mvm: ensure offloading TID queue exists
    cvelistv5