CVE-2024-35913

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF

When we want to know whether we should look for the mac_id or the

link_id in struct iwl_mvm_session_prot_notif, we should look at the

version of SESSION_PROTECTION_NOTIF.

This causes WARNINGs:

WARNING: CPU: 0 PID: 11403 at drivers/net/wireless/intel/iwlwifi/mvm/time-event.c:959 iwl_mvm_rx_session_protect_notif+0x333/0x340 [iwlmvm]

RIP: 0010:iwl_mvm_rx_session_protect_notif+0x333/0x340 [iwlmvm]

Code: 00 49 c7 84 24 48 07 00 00 00 00 00 00 41 c6 84 24 78 07 00 00 ff 4c 89 f7 e8 e9 71 54 d9 e9 7d fd ff ff 0f 0b e9 23 fe ff ff <0f> 0b e9 1c fe ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90

RSP: 0018:ffffb4bb00003d40 EFLAGS: 00010202

RAX: 0000000000000000 RBX: ffff9ae63a361000 RCX: ffff9ae4a98b60d4

RDX: ffff9ae4588499c0 RSI: 0000000000000305 RDI: ffff9ae4a98b6358

RBP: ffffb4bb00003d68 R08: 0000000000000003 R09: 0000000000000010

R10: ffffb4bb00003d00 R1

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References