CVE-2024-47718

wifi: rtw88: always wait for both firmware loading attempts

State: Published
Severity: Not scored
Published: Oct 21, 2024
Updated: Oct 15, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: always wait for both firmware loading attempts

In 'rtw_wait_firmware_completion()', always wait for both (regular and wowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()' has failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue 'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually the wowlan one) is still in progress, causing UAF detected by KASAN.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c8e5695eae9959fc5774c0f490f2450be8bad3de to before a0c1e2da652cf70825739bc12d49ea15805690bfAffected c8e5695eae9959fc5774c0f490f2450be8bad3de to before ceaab3fb64d6a5426a3db8f87f3e5757964f2532Affected c8e5695eae9959fc5774c0f490f2450be8bad3de to before 7887ad11995a4142671cc49146db536f923c8568Affected c8e5695eae9959fc5774c0f490f2450be8bad3de to before 1b8178a2ae272256ea0dc4f940320a81003535e2Affected c8e5695eae9959fc5774c0f490f2450be8bad3de to before 9432185540bafd42b7bfac6e6ef2f0a0fb4be447Affected c8e5695eae9959fc5774c0f490f2450be8bad3de to before e9a78d9417e167410d6fb83c4e908b077ad8ba6dAffected c8e5695eae9959fc5774c0f490f2450be8bad3de to before 0e735a4c6137262bcefe45bb52fde7b1f5fc6c4dAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.227 through 5.10.Not affected 5.15.168 through 5.15.Not affected 6.1.113 through 6.1.Not affected 6.6.54 through 6.6.Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

c8e5695eae9959fc5774c0f490f2450be8bad3de to before a0c1e2da652cf70825739bc12d49ea15805690bfAffected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before ceaab3fb64d6a5426a3db8f87f3e5757964f2532Affected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before 7887ad11995a4142671cc49146db536f923c8568Affected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before 1b8178a2ae272256ea0dc4f940320a81003535e2Affected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before 9432185540bafd42b7bfac6e6ef2f0a0fb4be447Affected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before e9a78d9417e167410d6fb83c4e908b077ad8ba6dAffected
c8e5695eae9959fc5774c0f490f2450be8bad3de to before 0e735a4c6137262bcefe45bb52fde7b1f5fc6c4dAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.227 through 5.10.*Not affected
5.15.168 through 5.15.*Not affected
6.1.113 through 6.1.*Not affected
6.6.54 through 6.6.*Not affected
6.10.13 through 6.10.*Not affected
6.11.2 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.