CVE-2024-50128

A flaw was found in the Wireless Wide Area Network (WWAN) subsystem of the Linux kernel. This vulnerability, an out-of-bounds read, occurs when the system incorrectly processes network communication attributes due to an improperly sized variable. A local attacker with low privileges could exploit this to read sensitive information from memory. Successful exploitation could also lead to a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the wwan kernel module from loading. This can be achieved by creating a modprobe configuration file.

1. Create or edit /etc/modprobe.d/disable-wwan.conf with the following content:

install wwan /bin/true
blacklist wwan

2. Rebuild the initramfs using dracut -f -v or mkinitrd -f -v $(uname -r).
3. Reboot the system for the changes to take effect.

This mitigation will prevent the wwan module from being loaded, which may impact functionality relying on Wireless WAN devices. If the system relies on WWAN functionality, this mitigation may not be suitable.