CVE-2024-58097CWE-835

CVE-2024-58097

Medium · published April 16, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix RCU stall while reaping monitor destination ring

While processing the monitor destination ring, MSDUs are reaped from the

link descriptor based on the corresponding buf_id.

However, sometimes the driver cannot obtain a valid buffer corresponding

to the buf_id received from the hardware. This causes an infinite loop

in the destination processing, resulting in a kernel crash.

kernel log:

ath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309

ath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed

ath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309

ath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed

Fix this by skipping the problematic buf_id and reaping the next entry,

replacing the break with the next MSDU processing.

Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2025-04-16T19:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 6.14.26.14.2
References (5)
EPSS history
Timeline
  • 16 APR 14:11Z
    wifi: ath11k: fix RCU stall while reaping monitor destination ring
    cvelistv5