Linux Kernel Vulnerability in RTW89 WiFi Driver by Developer Community

CVE-2024-57991

Summary

The Linux kernel has a vulnerability in the RTW89 WiFi driver that can lead to a soft lockup under certain conditions during the channel management process. Specifically, in the rtw89_entity_recalc_mgnt_roles() function, a flaw in the process of normalizing the list can prevent it from terminating correctly, allowing the outer loop to continue even after a match is found. This can result in a situation where the CPU appears to be unresponsive for an extended period, leading to performance degradation. The issue has been addressed by modifying the control flow to ensure the termination of the loop when necessary.

References