CVE-2024-27056
kernel: wifi: iwlwifi: mvm: ensure offloading TID queue exists
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 1, 2024
Updated · October 31, 2026
Description
A vulnerability was found in the Linux kernel's iwlwifi driver for Intel wireless devices. This issue occurs when the system attempts to sync the TX queue for an offloading TID during resume, but the queue is not allocated if no packets have been sent on TID 0.
Statement
This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because it results in a local denial of service through a system crash during power-management resume operations on hardware using Intel wireless devices. Enterprise server installations and cloud instances typically do not deploy or utilize Wi-Fi interfaces, making exposure predominantly restricted to bare-metal client systems. Additionally, the flaw requires specific power state transitions rather than remote trigger mechanisms, which prevents privilege escalation or arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference