CVE-2024-36922

MEDIUM

Linux Kernel < 6.6.31, 6.7.0-6.8.10, >=6.9 - Use-After-Free in iwlwifi TX Queue Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim the same entry twice, resulting in the WARN_ONCE() a little later. Fix that by reading txq->read_ptr under lock.

Scores

CVSS v3 5.5
EPSS 0.0024
EPSS Percentile 15.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (19)
linux/Kernel 4.19.0 - 5.15.209linux
linux/Kernel 4.19.0 - 6.6.31linux
linux/Kernel 5.16.0 - 6.1.175linux
linux/Kernel 6.2.0 - 6.6.31linux
linux/Kernel 6.7.0 - 6.8.10linux
Linux/Linux < 4.19
Linux/Linux 4.19
Linux/Linux 5.15.209 - 5.15.*
Linux/Linux 6.1.175 - 6.1.*
Linux/Linux 6.6.31 - 6.6.*
... and 9 more
Published May 30, 2024
Tracked Since Feb 18, 2026