CVE-2024-27056
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
In the Linux kernel, the iwlwifi (mvm subsystem) driver has a vulnerability where the TX queue for the offloading TID is not guaranteed to exist during resume. In the rare case that no packets were sent on TID 0, the queue is not allocated, causing a system crash.
Risk Assessment
The risk involves potential system hang or crash during resume from suspend, disrupting network services and requiring manual reboot.
Recommendation
Immediately update the Linux kernel to a version containing the fix (commit in iwlwifi) that ensures the TX queue for TID 0 is created before system suspend.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: ensure offloading TID queue exists The resume code path assumes that the TX queue for the offloading TID has been configured. At resume time it then tries to sync the write pointer as it may have been updated by the firmware. In the unusual event that no packets have been send on TID 0, the queue will not have been allocated and this causes a crash. Fix this by ensuring the queue exist at suspend time.