CVE-2024-50008

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A local attacker could exploit a field-spanning write vulnerability within the mwifiex_cmd_802_11_scan_ext() function. This issue could lead to a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mwifiex kernel module from loading. This can be achieved by creating a blacklist entry for the module.

1. Create a new file /etc/modprobe.d/blacklist-mwifiex.conf with the following content:

   blacklist mwifiex
   install mwifiex /bin/true
   

2. Regenerate the initramfs to ensure the blacklist is applied during boot:

   sudo dracut -f -v
   

   or for systems using mkinitrd:

   sudo mkinitrd -f /boot/initramfs-$(uname -r).img $(uname -r)
   

3. Reboot the system for the changes to take effect.

This mitigation will disable functionality provided by the mwifiex Wi-Fi driver, which may impact wireless network connectivity if your system relies on this specific hardware.