CVE-2024-47713

wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: Oct 15, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()

Since '__dev_queue_xmit()' should be called with interrupts enabled, the following backtrace:

ieee80211_do_stop() ... spin_lock_irqsave(&local->queue_stop_reason_lock, flags) ... ieee80211_free_txskb() ieee80211_report_used_skb() ieee80211_report_ack_skb() cfg80211_mgmt_tx_status_ext() nl80211_frame_tx_status() genlmsg_multicast_netns() genlmsg_multicast_netns_filtered() nlmsg_multicast_filtered() netlink_broadcast_filtered() do_one_broadcast() netlink_broadcast_deliver() __netlink_sendskb() netlink_deliver_tap() __netlink_deliver_tap_skb() dev_queue_xmit() __dev_queue_xmit() ; with IRQS disabled ... spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags)

issues the warning (as reported by syzbot reproducer):

WARNING: CPU: 2 PID: 5128 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120

Fix this by implementing a two-phase skb reclamation in 'ieee80211_do_stop()', where actual work is performed outside of a section with interrupts disabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5061b0c2b9066de426fbc63f1278d2210e789412 to before 07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268Affected 5061b0c2b9066de426fbc63f1278d2210e789412 to before 04f75f5bae33349283d6886901d9acd2f110c024Affected 5061b0c2b9066de426fbc63f1278d2210e789412 to before f232916fab67ca1c3425926df4a866e59ff26908Affected 5061b0c2b9066de426fbc63f1278d2210e789412 to before acb53a716e492a02479345157c43f21edc8bc64bAffected 5061b0c2b9066de426fbc63f1278d2210e789412 to before db5ca4b42ccfa42d2af7b335ff12578e57775c02Affected 5061b0c2b9066de426fbc63f1278d2210e789412 to before 058c9026ad79dc98572442fd4c7e9a36aba6f596Affected 5061b0c2b9066de426fbc63f1278d2210e789412 to before eab272972cffff9cd973b8e4055a8e81c64f7e6aAffected 5061b0c2b9066de426fbc63f1278d2210e789412 to before ad4b7068b101fbbb4a9ca4b99b25eb051a9482ecAffected 5061b0c2b9066de426fbc63f1278d2210e789412 to before 9d301de12da6e1bb069a9835c38359b8e8135121Affected
LinuxLinux	2.6.32Affected before 2.6.32Not affected 4.19.323 through 4.19.Not affected 5.4.285 through 5.4.Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

5061b0c2b9066de426fbc63f1278d2210e789412 to before 07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268Affected
5061b0c2b9066de426fbc63f1278d2210e789412 to before 04f75f5bae33349283d6886901d9acd2f110c024Affected
5061b0c2b9066de426fbc63f1278d2210e789412 to before f232916fab67ca1c3425926df4a866e59ff26908Affected
5061b0c2b9066de426fbc63f1278d2210e789412 to before acb53a716e492a02479345157c43f21edc8bc64bAffected
5061b0c2b9066de426fbc63f1278d2210e789412 to before db5ca4b42ccfa42d2af7b335ff12578e57775c02Affected
5061b0c2b9066de426fbc63f1278d2210e789412 to before 058c9026ad79dc98572442fd4c7e9a36aba6f596Affected
5061b0c2b9066de426fbc63f1278d2210e789412 to before eab272972cffff9cd973b8e4055a8e81c64f7e6aAffected
5061b0c2b9066de426fbc63f1278d2210e789412 to before ad4b7068b101fbbb4a9ca4b99b25eb051a9482ecAffected
5061b0c2b9066de426fbc63f1278d2210e789412 to before 9d301de12da6e1bb069a9835c38359b8e8135121Affected

LinuxLinux

2.6.32Affected
before 2.6.32Not affected
4.19.323 through 4.19.*Not affected
5.4.285 through 5.4.*Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.