CVE-2024-47673
kernel: wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 9, 2024
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's iwlwifi driver. By not pausing the Traffic Control Manager (TCM) when the Wi-Fi firmware is stopped, a host command can be sent to the transport while the firmware is inactive. This improper handling of the firmware state can lead to a system warning and potentially a denial of service, impacting system availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the iwlwifi kernel module from loading. This will disable Wi-Fi functionality for Intel wireless adapters.
- Create a file named
blacklist-iwlwifi.confin/etc/modprobe.d/with the following content:
blacklist iwlwifi
- Regenerate the initramfs to ensure the blacklist is applied:
For RHEL 8/9:
sudo dracut -f -vFor RHEL 7:sudo dracut -f - Reboot the system for the changes to take effect.
Note that this mitigation will disable all Wi-Fi functionality provided by Intel wireless adapters on the system.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')