CVE-2024-36922

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-36922
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36922.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-36922
Downstream
Related
Published
2024-05-30T16:15:15Z
Modified
2025-10-01T13:52:14Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: read txq->read_ptr under lock

If we read txq->readptr without lock, we can read the same value twice, then obtain the lock, and reclaim from there to two different places, but crucially reclaim the same entry twice, resulting in the WARNONCE() a little later. Fix that by reading txq->read_ptr under lock.

References

Affected packages