Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2024-47721: Linux kernel Wi‑Fi driver may read beyond memory
CVE-2024-47721 · published 2 years ago
Summary
The Linux kernel's Wi‑Fi driver for certain Realtek chips had a placeholder event that was never handled. When the driver tried to process this event, it could read past the intended data area, potentially leading to crashes or unintended data exposure. Updating to a kernel version that removes the unused event resolves the issue.
What to do
- Update linux kernel to version 6.11.2.
- Update debian linux to version 6.11.2-1.
- Update linux linux to version 10463308b9454f534d03300cf679bc4b3d078f46 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.10, < 6.10.13 >= 6.11, < 6.11.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< 10463308b9454f534d03300cf679bc4b3d078f46 6.10 |
| Linux | linux | kernel |
>= 6.11.0, < 6.11.2 Fix: upgrade to 6.11.2
|
| Debian:13 | debian | linux |
< 6.11.2-1 Fix: upgrade to 6.11.2-1
|
Original advisory text
wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading The handler of firmware C2H event RTW89_MAC_C2H_FUNC_READ_WOW_CAM isn't implemented, but driver expects number of handlers is NUM_OF_RTW89_MAC_C2H_FUNC_WOW causing out-of-bounds access. Fix it by removing ID. Addresses-Coverity-ID: 1598775 ("Out-of-bounds read")
References
- https://git.kernel.org/stable/c/10463308b9454f534d03300cf679bc4b3d078f46 URL
- https://git.kernel.org/stable/c/2c9c2d1a20916589497a7facbea3e82cabec4ab8 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47721... Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://nvd.nist.gov/vuln/detail/CVE-2024-47721 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2024-47721 Vendor Advisory
- https://git.kernel.org/stable/c/56310ddb50b190b3390fdc974aec455d0a516bd2 URL
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
8.8
High
Type
CWE-125Out-of-bounds Read
Timeline
Published21 Oct 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-47721 · OSV
CVE-2024-47721 · NVD
CVE-2024-47721 · MITRE
DEBIAN-CVE-2024-47721 · OSV
Track software like this
Free during beta