In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING.
bad state = 0 WARNING: CPU: 2 PID: 17434 at drivers/net/wireless/intel/iwlwifi/iwl-trans.c:115 iwltranssendcmd+0x1cb/0x1e0 [iwlwifi] RIP: 0010:iwltranssendcmd+0x1cb/0x1e0 [iwlwifi] Call Trace: <TASK> iwlmvmsendcmd+0x40/0xc0 [iwlmvm] iwlmvmconfigscan+0x198/0x260 [iwlmvm] iwlmvmrecalctcm+0x730/0x11d0 [iwlmvm] iwlmvmtcmwork+0x1d/0x30 [iwlmvm] processonework+0x29e/0x640 workerthread+0x2df/0x690 ? rescuerthread+0x540/0x540 kthread+0x192/0x1e0 ? setkthreadstruct+0x90/0x90 retfromfork+0x22/0x30
[
{
"signature_version": "v1",
"id": "CVE-2024-47673-0b165376",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15df5f37fa3a8b7a8ec7a339d1e897bc524e28f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170410238593090361924908126436023473280",
"241186661113404723740967213698394168821",
"72409737628834618538274717000016651851"
]
},
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-15c87e02",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a15df5f37fa3a8b7a8ec7a339d1e897bc524e28f",
"digest": {
"length": 289.0,
"function_hash": "39873370152432212225440358318486160227"
},
"deprecated": false,
"target": {
"function": "iwl_mvm_stop_device",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-1f4efe31",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0668ebc8c2282ca1e7eb96092a347baefffb5fe7",
"digest": {
"length": 318.0,
"function_hash": "317618770135028159141908829149578950642"
},
"deprecated": false,
"target": {
"function": "iwl_mvm_stop_device",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-27ca907f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55086c97a55d781b04a2667401c75ffde190135c",
"digest": {
"length": 318.0,
"function_hash": "317618770135028159141908829149578950642"
},
"deprecated": false,
"target": {
"function": "iwl_mvm_stop_device",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-4880a791",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0668ebc8c2282ca1e7eb96092a347baefffb5fe7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170410238593090361924908126436023473280",
"241186661113404723740967213698394168821",
"72409737628834618538274717000016651851"
]
},
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-71c7b9d7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5948a191906b54e10f02f6b7a7670243a39f99f4",
"digest": {
"length": 318.0,
"function_hash": "317618770135028159141908829149578950642"
},
"deprecated": false,
"target": {
"function": "iwl_mvm_stop_device",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-924128e5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@55086c97a55d781b04a2667401c75ffde190135c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170410238593090361924908126436023473280",
"241186661113404723740967213698394168821",
"72409737628834618538274717000016651851"
]
},
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-b5d34444",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c61b561baf92a2860c76c2302a62169e22c21cc",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170410238593090361924908126436023473280",
"241186661113404723740967213698394168821",
"72409737628834618538274717000016651851"
]
},
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Line"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-beae7482",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c61b561baf92a2860c76c2302a62169e22c21cc",
"digest": {
"length": 318.0,
"function_hash": "317618770135028159141908829149578950642"
},
"deprecated": false,
"target": {
"function": "iwl_mvm_stop_device",
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Function"
},
{
"signature_version": "v1",
"id": "CVE-2024-47673-f4db5bd7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5948a191906b54e10f02f6b7a7670243a39f99f4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"170410238593090361924908126436023473280",
"241186661113404723740967213698394168821",
"72409737628834618538274717000016651851"
]
},
"deprecated": false,
"target": {
"file": "drivers/net/wireless/intel/iwlwifi/mvm/ops.c"
},
"signature_type": "Line"
}
]