CVE-2024-27056: linux-libc-dev - wifi: iwlwifi: mvm: ensure offloading TID queue exists
Summary
CVE-2024-27056: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path assumes that the TX queue for the offloading TID has been configured. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Debian distribution that provides the C library headers for the Linux kernel. It is an essential component for compiling and building software on Debian-based systems. The vulnerability affects version 6.1.90-1 of the linux-libc-dev package.
Vulnerability Detail
The vulnerability in the linux-libc-dev package is related to the wifi functionality of the iwlwifi driver in the Linux kernel. The issue arises during the resume code path, where it assumes that the TX queue for the offloading TID (Traffic Identifier) has been configured. However, in cases where no packets have been sent on TID 0, the queue may not have been allocated, leading to a crash. This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition on the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The linux-libc-dev package is vulnerable to a DoS vulnerability related to the iwlwifi driver in the Linux kernel. It is recommended to update the package to a patched version provided by the package maintainer. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Debian distribution that provides the C library headers for the Linux kernel. It is used for compiling and building software on Debian-based systems.
This vulnerability can be exploited by an attacker to cause a denial-of-service (DoS) condition on the affected system.
To fix this vulnerability, it is recommended to update the linux-libc-dev package to a version that includes the necessary patch. Apply the latest security updates provided by the package maintainer.
No specific workaround has been mentioned for this vulnerability.
You can find more information about this vulnerability in the references provided, including the CVE entry and the Debian Security Tracker.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
