CVE-2024-40977

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40977

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (e.g. chip reset), there is a possible situation that kernel worker reset_work is holding the lock and waiting for kernel thread stat_worker to be parked, while stat_worker is waiting for the release of the same lock. It causes a deadlock resulting in the dumping of hung tasks messages and possible rebooting of the device. This patch prevents the execution of stat_worker during the chip recovery.

References
Link Resource
https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 Patch
https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 Patch
https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 Patch
https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 Patch
https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 Patch
https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 Patch
https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 Patch
https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 Patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 22:17

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html -

21 Nov 2024, 09:31

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 - Patch () https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 - Patch
References () https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 - Patch () https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 - Patch
References () https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 - Patch () https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 - Patch
References () https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 - Patch () https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 - Patch

09 Sep 2024, 18:11

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 - () https://git.kernel.org/stable/c/0b81faa05b0b9feb3ae2d69be1d21f0d126ecb08 - Patch
References () https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 - () https://git.kernel.org/stable/c/85edd783f4539a994d66c4c014d5858f490b7a02 - Patch
References () https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 - () https://git.kernel.org/stable/c/e974dd4c22a23ec3ce579fb6d31a674ac0435da9 - Patch
References () https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 - () https://git.kernel.org/stable/c/ecf0b2b8a37c8464186620bef37812a117ff6366 - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: mt76: mt7921s: soluciona posibles tareas bloqueadas durante la recuperación del chip Durante la recuperación del chip (por ejemplo, reinicio del chip), existe una posible situación en la que el trabajador del kernel reset_work esté manteniendo el bloqueo y esperando. El hilo del kernel stat_worker se estacionará, mientras stat_worker está esperando la liberación del mismo bloqueo. Provoca un punto muerto que resulta en el volcado de mensajes de tareas colgadas y un posible reinicio del dispositivo. Este parche evita la ejecución de stat_worker durante la recuperación del chip.
CWE CWE-667
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

12 Jul 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-12 13:15

Updated : 2025-11-03 22:17

NVD link : CVE-2024-40977

Mitre link : CVE-2024-40977

CVE.ORG link : CVE-2024-40977

JSON object : View

Products Affected

linux

CWE
CWE-667

Improper Locking