CVE-2024-58097
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 16, 2025
Updated: May 6, 2025
CWE ID 835
Summary
CVE-2024-58097 is a vulnerability affecting the Linux kernel's wifi driver, ath11k. The issue arises during the processing of the monitor destination ring, where MSDUs are reaped based on buf_ids received from the hardware. However, when an invalid buf_id is encountered, an infinite loop occurs, leading to a kernel crash. To address this, the driver now skips the problematic buf_id and moves on to the next entry during the MSDU processing. This vulnerability has been confirmed to impact WCN6855 and QCN9074 Wi-Fi hardware.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.