CVE-2024-36970

2024-06-0813:15:58

Debian Security Bug Tracker

security-tracker.debian.org

linux kernel

wifi driver

vulnerability

deadlock regression

iwlwifi radios

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regression that came in with the LED merge in 6.9. The deadlock happens on my system with 24 iwlwifi radios, so maybe it something like all worker threads are busy and some work that needs to complete cannot complete. [also remove unnecessary “load_module” var and now-wrong comment]

OSVersionArchitecturePackageVersionFilename
Debian12alllinux< 6.1.76-1linux_6.1.76-1_all.deb
Debian11alllinux< 5.10.209-2linux_5.10.209-2_all.deb
Debian10alllinux< 4.19.249-2linux_4.19.249-2_all.deb
Debian999alllinux< 6.8.12-1linux_6.8.12-1_all.deb
Debian13alllinux< 6.8.12-1linux_6.8.12-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	linux	< 6.1.76-1	linux_6.1.76-1_all.deb
Debian	11	all	linux	< 5.10.209-2	linux_5.10.209-2_all.deb
Debian	10	all	linux	< 4.19.249-2	linux_4.19.249-2_all.deb
Debian	999	all	linux	< 6.8.12-1	linux_6.8.12-1_all.deb
Debian	13	all	linux	< 6.8.12-1	linux_6.8.12-1_all.deb