CVE-2024-57991

Summary

CVE-2024-57991 is a vulnerability affecting the Linux kernel's wifi driver, rtw89. The issue lies in the function rtw89_entity_recalc_mgnt_roles(), where a normalizing process can cause a soft lockup. This happens when a specific pattern is found in the list, leading the outer list_for_each_entry loop to continue instead of breaking, causing the CPU to become stuck. The vulnerability is resolved by using a "goto fill" statement to break from the list_for_each_entry loop, preventing the soft lockup. A kernel log sample shows a watchdog error with the CPU being stuck for over 26 seconds, indicating the presence of this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.