Bug 1226127 (CVE-2024-36970) - VUL-0: CVE-2024-36970: kernel: wifi: iwlwifi: Use request_module_nowait
Summary: VUL-0: CVE-2024-36970: kernel: wifi: iwlwifi: Use request_module_nowait
Status: NEW
Alias: CVE-2024-36970
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/409725/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-36970:4.7:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-06-10 07:16 UTC by SMASH SMASH
Modified: 2024-06-12 17:02 UTC (History)
2 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-06-10 07:16:06 UTC 
In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: Use request_module_nowait

This appears to work around a deadlock regression that came in
with the LED merge in 6.9.

The deadlock happens on my system with 24 iwlwifi radios, so maybe
it something like all worker threads are busy and some work that needs
to complete cannot complete.

[also remove unnecessary "load_module" var and now-wrong comment]

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-36970
https://www.cve.org/CVERecord?id=CVE-2024-36970
https://git.kernel.org/stable/c/3d913719df14c28c4d3819e7e6d150760222bda4
https://git.kernel.org/stable/c/d20013259539e2fde2deeac85354851097afdf9e
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-36970.mbox