CVE-2024-49939

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw89: avoid to add interface to list twice when SER

If SER L2 occurs during the WoWLAN resume flow, the add interface flow

is triggered by ieee80211_reconfig(). However, due to

rtw89_wow_resume() return failure, it will cause the add interface flow

to be executed again, resulting in a double add list and causing a kernel

panic. Therefore, we have added a check to prevent double adding of the

list.

list_add double add: new=ffff99d6992e2010, prev=ffff99d6992e2010, next=ffff99d695302628.

------------[ cut here ]------------

kernel BUG at lib/list_debug.c:37!

invalid opcode: 0000 [#1] PREEMPT SMP NOPTI

CPU: 0 PID: 9 Comm: kworker/0:1 Tainted: G W O 6.6.30-02659-gc18865c4dfbd #1 770df2933251a0e3c888ba69d1053a817a6376a7

Hardware name: HP Grunt/Grunt, BIOS Google_Grunt.11031.169.0 06/24/2021

Workqueue: events_freezable ieee80211_restart_work [mac80211]

RIP: 0010:__list_add_valid_or_report+0x5e/0xb0

Cod

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References