CVE-2024-53074

A flaw was found in the Linux kernel's iwlwifi wireless driver. The driver fails to properly release link mapping resources when an Access Point (AP) is removed or stopped. A local privileged user could exploit this flaw by stopping a wireless AP, leading to a Denial of Service (DoS) condition where the device cannot restart the access point without reloading the driver or rebooting the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the affected Intel Wi-Fi driver module from loading if wireless access point functionality or Intel wireless networking is not required.

1. Blacklist the kernel module by creating a configuration file:

echo "install iwlmvm /bin/true" >> /etc/modprobe.d/disable-iwlmvm.conf

2. Unload the module if it is currently active:

modprobe -r iwlmvm

Warning: Modifying kernel module configurations requires a system restart or unloading the active driver to take effect. Caveat: Disabling the iwlmvm driver disables wireless networking for Intel Wi-Fi adapters driven by this module.