CVE-2024-36922

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36922
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: read txq->read_ptr under lock If we read txq->read_ptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim the same entry twice, resulting in the WARN_ONCE() a little later. Fix that by reading txq->read_ptr under lock.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 Patch
https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa Patch
https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 Patch
https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 Patch
https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa Patch
https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
History

01 Oct 2025, 13:52

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 - () https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 - Patch
References () https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa - () https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa - Patch
References () https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 - () https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*

21 Nov 2024, 09:22

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: iwlwifi: leer txq->read_ptr bajo bloqueo Si leemos txq->read_ptr sin bloqueo, podemos leer el mismo valor dos veces, luego obtener el bloqueo y reclamar desde allí a dos lugares diferentes, pero fundamentalmente reclama la misma entrada dos veces, lo que resulta en WARN_ONCE() un poco más tarde. Solucione eso leyendo txq->read_ptr bajo bloqueo.
References () https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 - () https://git.kernel.org/stable/c/43d07103df670484cdd26f9588eabef80f69db89 -
References () https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa - () https://git.kernel.org/stable/c/b83db8e756dec68a950ed2f056248b1704b3deaa -
References () https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 - () https://git.kernel.org/stable/c/c2ace6300600c634553657785dfe5ea0ed688ac2 -

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-10-01 13:52

NVD link : CVE-2024-36922

Mitre link : CVE-2024-36922

CVE.ORG link : CVE-2024-36922

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo