CVE-2024-56609

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb

When removing kernel modules by:

rmmod rtw88_8723cs rtw88_8703b rtw88_8723x rtw88_sdio rtw88_core

Driver uses skb_queue_purge() to purge TX skb, but not report tx status

causing "Have pending ack frames!" warning. Use ieee80211_purge_tx_queue()

to correct this.

Since ieee80211_purge_tx_queue() doesn't take locks, to prevent racing

between TX work and purge TX queue, flush and destroy TX work in advance.

wlan0: deauthenticating from aa:f5:fd:60:4c:a8 by local

choice (Reason: 3=DEAUTH_LEAVING)

------------[ cut here ]------------

Have pending ack frames!

WARNING: CPU: 3 PID: 9232 at net/mac80211/main.c:1691

ieee80211_free_ack_frame+0x5c/0x90 [mac80211]

CPU: 3 PID: 9232 Comm: rmmod Tainted: G C

6.10.1-200.fc40.aarch64 #1

Hardware name: pine64 Pine64 PinePhone Braveheart

(1.1)/Pine64 PinePhone Braveheart (

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References