In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
Since '__dev_queue_xmit()' should be called with interrupts enabled, the following backtrace:
ieee80211_do_stop() ... spin_lock_irqsave(&local->queue_stop_reason_lock, flags) ... ieee80211_free_txskb() ieee80211_report_used_skb() ieee80211_report_ack_skb() cfg80211_mgmt_tx_status_ext() nl80211_frame_tx_status() genlmsg_multicast_netns() genlmsg_multicast_netns_filtered() nlmsg_multicast_filtered() netlink_broadcast_filtered() do_one_broadcast() netlink_broadcast_deliver() __netlink_sendskb() netlink_deliver_tap() __netlink_deliver_tap_skb() dev_queue_xmit() __dev_queue_xmit() ; with IRQS disabled ... spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags)
issues the warning (as reported by syzbot reproducer):
WARNING: CPU: 2 PID: 5128 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120
Fix this by implementing a two-phase skb reclamation in 'ieee80211_do_stop()', where actual work is performed outside of a section with interrupts disabled.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azureUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub