CVE-2024-49938

A flaw was found in the Linux kernel's ath9k_htc Wi-Fi driver. An issue exists where the skb_trim() function, used for resetting the length of a socket buffer (skb) before resubmitting a USB Request Block (urb), can encounter an uninitialized length value in certain error conditions. A local attacker could potentially exploit this vulnerability to cause a denial of service by triggering these error paths.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the ath9k_htc kernel module from loading if the affected Atheros wireless hardware is not required. This can be achieved by blacklisting the module. Create a file /etc/modprobe.d/blacklist-ath9k_htc.conf with the following content:

blacklist ath9k_htc

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.

dracut -f -v
reboot

Disabling this module will impact wireless functionality if ath9k_htc is in use.