CVE-2024-47673

wifi: iwlwifi: mvm: pause TCM when the firmware is stopped

State
Published
Severity
Not scored
Published
Oct 9, 2024
Updated
May 11, 2026
Reserved
Sep 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: pause TCM when the firmware is stopped

Not doing so will make us send a host command to the transport while the firmware is not alive, which will trigger a WARNING.

bad state = 0 WARNING: CPU: 2 PID: 17434 at drivers/net/wireless/intel/iwlwifi/iwl-trans.c:115 iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi] RIP: 0010:iwl_trans_send_cmd+0x1cb/0x1e0 [iwlwifi] Call Trace: <TASK> iwl_mvm_send_cmd+0x40/0xc0 [iwlmvm] iwl_mvm_config_scan+0x198/0x260 [iwlmvm] iwl_mvm_recalc_tcm+0x730/0x11d0 [iwlmvm] iwl_mvm_tcm_work+0x1d/0x30 [iwlmvm] process_one_work+0x29e/0x640 worker_thread+0x2df/0x690 ? rescuer_thread+0x540/0x540 kthread+0x192/0x1e0 ? set_kthread_struct+0x90/0x90 ret_from_fork+0x22/0x30

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7d9d0d562b54d2953304693f76bc2bbfbe318c27 to before a15df5f37fa3a8b7a8ec7a339d1e897bc524e28fAffected
  • 7d9d0d562b54d2953304693f76bc2bbfbe318c27 to before 5948a191906b54e10f02f6b7a7670243a39f99f4Affected
  • 7d9d0d562b54d2953304693f76bc2bbfbe318c27 to before 2c61b561baf92a2860c76c2302a62169e22c21ccAffected
  • 7d9d0d562b54d2953304693f76bc2bbfbe318c27 to before 55086c97a55d781b04a2667401c75ffde190135cAffected
  • 7d9d0d562b54d2953304693f76bc2bbfbe318c27 to before 0668ebc8c2282ca1e7eb96092a347baefffb5fe7Affected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 5.15.168 through 5.15.*Not affected
  • 6.1.112 through 6.1.*Not affected
  • 6.6.53 through 6.6.*Not affected
  • 6.10.12 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.