Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-47718

wifi: rtw88: always wait for both firmware loading attempts

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_completion()', always wait for both (regular and wowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()' has failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue 'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually the wowlan one) is still in progress, causing UAF detected by KASAN.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < a0c1e2da652cf70825739bc12d49ea15805690bfaffected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < ceaab3fb64d6a5426a3db8f87f3e5757964f2532affected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < 7887ad11995a4142671cc49146db536f923c8568affected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < 1b8178a2ae272256ea0dc4f940320a81003535e2affected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < 9432185540bafd42b7bfac6e6ef2f0a0fb4be447affected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < e9a78d9417e167410d6fb83c4e908b077ad8ba6daffected
  • c8e5695eae9959fc5774c0f490f2450be8bad3de to < 0e735a4c6137262bcefe45bb52fde7b1f5fc6c4daffected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.227 to ≤ 5.10.*unaffected
  • 5.15.168 to ≤ 5.15.*unaffected
  • 6.1.113 to ≤ 6.1.*unaffected
  • 6.6.54 to ≤ 6.6.*unaffected
  • 6.10.13 to ≤ 6.10.*unaffected
  • 6.11.2 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References