CVE Database›CVE-2024-47673

CVE-2024-47673

kernel: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 9, 2024

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's iwlwifi driver. By not pausing the Traffic Control Manager (TCM) when the Wi-Fi firmware is stopped, a host command can be sent to the transport while the firmware is inactive. This improper handling of the firmware state can lead to a system warning and potentially a denial of service, impacting system availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the iwlwifi kernel module from loading. This will disable Wi-Fi functionality for Intel wireless adapters.

  1. Create a file named blacklist-iwlwifi.conf in /etc/modprobe.d/ with the following content:
blacklist iwlwifi
  1. Regenerate the initramfs to ensure the blacklist is applied: For RHEL 8/9: sudo dracut -f -v For RHEL 7: sudo dracut -f
  2. Reboot the system for the changes to take effect.

Note that this mitigation will disable all Wi-Fi functionality provided by Intel wireless adapters on the system.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')