CVE-2024-47672

Summary

CVE-2024-47672 is a vulnerability affecting the Linux kernel's wifi driver iwlwifi. The issue arises when the driver waits for TX queues to become empty after the firmware has died. However, it is not feasible to expect anything from the firmware after it has been declared dead. Consequently, it is advised not to call the function iwl_trans_wait_tx_queues_empty() in this situation. Although stopping the flow earlier could be beneficial, the flush functions perform necessary maintenance work unrelated to the firmware, so it is recommended to keep them running even when the firmware is not.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.