Junglewise Threat Intelligence

CVE-2024-42114: Linux kernel soft lockup in cfg80211 wifi component

CVE-2024-42114 · Severity: medium · CVSS 4.4 · Published 2024-07-30

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's wireless networking component could allow a high-privileged user to cause a system-wide freeze or 'soft lockup.' By providing an extremely large value for certain Wi-Fi transmission queue parameters, the system's processor can become stuck in an infinite or excessive loop. This results in a denial-of-service where the machine becomes unresponsive to other tasks.

Technical details

The vulnerability is a denial-of-service (soft lockup) within the cfg80211 component of the Linux kernel. It is caused by a lack of range validation for the NL80211_ATTR_TXQ_QUANTUM attribute in the netlink interface. An attacker with sufficient privileges (typically CAP_NET_ADMIN) can set this value to 2^31, leading to an infinite or extremely long loop during packet dequeueing in the mac80211 layer (specifically within ieee80211_tx_dequeue). This consumes CPU resources indefinitely, triggering the kernel's watchdog timer. The fix involves implementing a netlink_range_validation policy to restrict the quantum value to INT_MAX.

Affected products

  • Linux Linux kernel 6.9.0-rc7

Timeline

  • 2024-06-15: patched: Initial patch submitted by Eric Dumazet
  • 2024-07-30: advisory: CVE-2024-42114 published

References

Related threats