Vulnerability in Linux
CVE-2024-36970
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regression that came in with the LED merge in 6.9. The deadlock happens on my system with 24 iwlwifi radios, so maybe it something like all worker threads are busy and some work that needs to complete cannot complete. [also remove unnecessary "load_module" var and now-wrong comment]
EPSS: 0.001 (3.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions f5c31bcf604db54470868f3118a60dc4a9ba8813, 6.9, 0
- Linux Linux_kernel
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-36970?
- CVE-2024-36970 is a medium-severity vulnerability in Linux, classified under Improper Locking. CVSS score: 5.5/10. Published 2024-06-08.
- How severe is CVE-2024-36970?
- Medium severity. CVSS v3 base score is 5.5 out of 10.