CVE-2024-36970 wifi: iwlwifi: Use request_module_nowait

2024-06-0813:01:03

Linux

github.com

linux kernel

iwlwifi

deadlock

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: Use request_module_nowait

This appears to work around a deadlock regression that came in
with the LED merge in 6.9.

The deadlock happens on my system with 24 iwlwifi radios, so maybe
it something like all worker threads are busy and some work that needs
to complete cannot complete.

[also remove unnecessary “load_module” var and now-wrong comment]

CNA Affected

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "f5c31bcf604d",
        "lessThan": "d20013259539",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f5c31bcf604d",
        "lessThan": "3d913719df14",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "v6.9-rc1~118"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "v6.9-rc1~118",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "6.9.2",
        "versionType": "custom",
        "lessThanOrEqual": "6.9.*"
      },
      {
        "status": "unaffected",
        "version": "6.10",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/intel/iwlwifi/iwl-drv.c"
    ],
    "defaultStatus": "affected"
  }
]