CVE-2024-35938

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: decrease MHI channel buffer length to 8KB

The Linux kernel CVE team has assigned CVE-2024-35938 to this issue.

Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051918-CVE-2024-35938-0100@gregkh/T

This vulnerability is rated as having Low impact for Red Hat because it requires specific Qualcomm Wi-Fi hardware that is rarely present or enabled in standard enterprise server deployments. The issue occurs when system memory becomes heavily fragmented, preventing the driver from allocating channel buffers during device resume or state transitions. In the event of an allocation failure, only the wireless network interface fails to initialize or resume properly, with no risk of privilege escalation or loss of data confidentiality and integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.