CVE-2024-47721

wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading

State: Published
Severity: 8.8 High
Published: Oct 21, 2024
Updated: Aug 5, 2026
Reserved: Sep 30, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading

The handler of firmware C2H event RTW89_MAC_C2H_FUNC_READ_WOW_CAM isn't implemented, but driver expects number of handlers is NUM_OF_RTW89_MAC_C2H_FUNC_WOW causing out-of-bounds access. Fix it by removing ID.

Addresses-Coverity-ID: 1598775 ("Out-of-bounds read")

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ff53fce5c78ba27ec7eb0baff7ef9648fde7ad8e to before 10463308b9454f534d03300cf679bc4b3d078f46Affected ff53fce5c78ba27ec7eb0baff7ef9648fde7ad8e to before 2c9c2d1a20916589497a7facbea3e82cabec4ab8Affected ff53fce5c78ba27ec7eb0baff7ef9648fde7ad8e to before 56310ddb50b190b3390fdc974aec455d0a516bd2Affected
LinuxLinux	6.10Affected before 6.10Not affected 6.10.13 through 6.10.Not affected 6.11.2 through 6.11.Not affected 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.