In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: ensure offloading TID queue exists
The resume code path assumes that the TX queue for the offloading TID has been configured. At resume time it then tries to sync the write pointer as it may have been updated by the firmware.
In the unusual event that no packets have been send on TID 0, the queue will not have been allocated and this causes a crash. Fix this by ensuring the queue exist at suspend time.
[
{
"id": "CVE-2024-27056-1ceb5530",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"93468375055473829839221054330152226805",
"91646991584436438993945666822455880806",
"92072586160222073021556903407621022370"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78f65fbf421a61894c14a1b91fe2fb4437b3fe5f"
},
{
"id": "CVE-2024-27056-29cd9def",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.h"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255000875819690674801307114410643042042",
"170409445103876486961133568065246753129",
"216944122959445668781506919271200489542",
"155630989303648842943976143880397993056",
"79187754043948791526806800780188308446"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35afffaddbe8d310dc61659da0b1a337b0d0addc"
},
{
"id": "CVE-2024-27056-2e03c40e",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.h"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255000875819690674801307114410643042042",
"170409445103876486961133568065246753129",
"216944122959445668781506919271200489542",
"155630989303648842943976143880397993056",
"79187754043948791526806800780188308446"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed35a509390ef4011ea2226da5dd6f62b73873b5"
},
{
"id": "CVE-2024-27056-4095d9ae",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__iwl_mvm_suspend",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"length": 2539.0,
"function_hash": "303535466043931821693598472519506020752"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78f65fbf421a61894c14a1b91fe2fb4437b3fe5f"
},
{
"id": "CVE-2024-27056-519ab959",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.h"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255000875819690674801307114410643042042",
"170409445103876486961133568065246753129",
"216944122959445668781506919271200489542",
"155630989303648842943976143880397993056",
"79187754043948791526806800780188308446"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4903303f25f48b5a1e34e6324c7fae9ccd6b959a"
},
{
"id": "CVE-2024-27056-79499b9a",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"264228948939341551329372616048819832191",
"100700510943947453780073142902786749518",
"319732341956444043594821732645016625860",
"140407655845192933174193667125664757866",
"337658403757438301094249655754679868999",
"269309268240777917882628286986265668721",
"133301504655042249684316575348406744111"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed35a509390ef4011ea2226da5dd6f62b73873b5"
},
{
"id": "CVE-2024-27056-89a17c90",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"264228948939341551329372616048819832191",
"100700510943947453780073142902786749518",
"319732341956444043594821732645016625860",
"140407655845192933174193667125664757866",
"337658403757438301094249655754679868999",
"269309268240777917882628286986265668721",
"133301504655042249684316575348406744111"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78f65fbf421a61894c14a1b91fe2fb4437b3fe5f"
},
{
"id": "CVE-2024-27056-948f61f4",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.h"
},
"deprecated": false,
"digest": {
"line_hashes": [
"255000875819690674801307114410643042042",
"170409445103876486961133568065246753129",
"216944122959445668781506919271200489542",
"155630989303648842943976143880397993056",
"79187754043948791526806800780188308446"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78f65fbf421a61894c14a1b91fe2fb4437b3fe5f"
},
{
"id": "CVE-2024-27056-9540d569",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"93468375055473829839221054330152226805",
"91646991584436438993945666822455880806",
"92072586160222073021556903407621022370"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35afffaddbe8d310dc61659da0b1a337b0d0addc"
},
{
"id": "CVE-2024-27056-9c87b825",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"93468375055473829839221054330152226805",
"91646991584436438993945666822455880806",
"92072586160222073021556903407621022370"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed35a509390ef4011ea2226da5dd6f62b73873b5"
},
{
"id": "CVE-2024-27056-9cf7d38d",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"264228948939341551329372616048819832191",
"100700510943947453780073142902786749518",
"319732341956444043594821732645016625860",
"140407655845192933174193667125664757866",
"337658403757438301094249655754679868999",
"269309268240777917882628286986265668721",
"133301504655042249684316575348406744111"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35afffaddbe8d310dc61659da0b1a337b0d0addc"
},
{
"id": "CVE-2024-27056-9e38ef46",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__iwl_mvm_suspend",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"length": 2509.0,
"function_hash": "210866698557303480625013035893638251868"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4903303f25f48b5a1e34e6324c7fae9ccd6b959a"
},
{
"id": "CVE-2024-27056-b25f54d7",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"264228948939341551329372616048819832191",
"210524967651222761865640460615163617986",
"43475875436375174824787837835955193022",
"125932753156478422549790382329208767696",
"337658403757438301094249655754679868999",
"269309268240777917882628286986265668721",
"133301504655042249684316575348406744111"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4903303f25f48b5a1e34e6324c7fae9ccd6b959a"
},
{
"id": "CVE-2024-27056-bc9aa374",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/sta.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"305180368356265819233262346154257529641",
"91646991584436438993945666822455880806",
"92072586160222073021556903407621022370"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4903303f25f48b5a1e34e6324c7fae9ccd6b959a"
},
{
"id": "CVE-2024-27056-c2443bfe",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__iwl_mvm_suspend",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"length": 2539.0,
"function_hash": "303535466043931821693598472519506020752"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35afffaddbe8d310dc61659da0b1a337b0d0addc"
},
{
"id": "CVE-2024-27056-d5085bd9",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__iwl_mvm_suspend",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/d3.c"
},
"deprecated": false,
"digest": {
"length": 2539.0,
"function_hash": "303535466043931821693598472519506020752"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed35a509390ef4011ea2226da5dd6f62b73873b5"
}
]