CVE-2024-58097

5.5 · MEDIUM

Published Apr 16, 2025 linux CWE-835 EPSS 0.20% (9th pctl) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

CVE-2024-58097 is a medium-severity vulnerability affecting linux linux_kernel. It was published on April 16, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix RCU stall while reaping monitor destination ring

While processing the monitor destination ring, MSDUs are reaped from the

link descriptor based on the corresponding buf_id.

However, sometimes the driver cannot obtain a valid buffer corresponding

to the buf_id received from the hardware. This causes an infinite loop

in the destination processing, resulting in a kernel crash.

kernel log:

ath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309

ath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed

ath11k_pci 0000:58:00.0: data msdu_pop: invalid buf_id 309

ath11k_pci 0000:58:00.0: data dp_rx_monitor_link_desc_return failed

Fix this by skipping the problematic buf_id and reaping the next entry,

replacing the break with the next MSDU processing.

Tested-on: WCN6855 hw2.0 PCI WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.30

Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QC

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
linux	linux_kernel	>= 5.6, < 6.14.2	Affected

References

Ref git.kernel.org/stable/c/16c6c35c03ea73054a1f6d3302a4ce4a331b427d Ref git.kernel.org/stable/c/8db5de0cf02fccf4c759aa58edbe65659daf607c Ref git.kernel.org/stable/c/9f1a002f0171d27f3554e529f3c70df438f05dfe Ref git.kernel.org/stable/c/b4991fc41745645f8050506f5a8578bd11e6b378

Frequently Asked Questions

What is CVE-2024-58097?

CVE-2024-58097 is a medium-severity vulnerability affecting linux linux_kernel. It was published on April 16, 2025 and has a CVSS 3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2024-58097?

This vulnerability has a CVSS 3.1 base score of 5.5, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-58097?

How can CyberStrike help with CVE-2024-58097?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-58097 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719