Medium 5.5Published Oct 21, 2024

CVE-2024-47713wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()

Updated under an hour ago (2026-10-19 09:30 UTC)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() Since '__dev_queue_xmit()' should be called with interrupts enabled, the following backtrace: ieee80211_do_stop() ... spin_lock_irqsave(&local->queue_stop_reason_lock, flags) ... ieee80211_free_txskb() ieee80211_report_used_skb() ieee80211_report_ack_skb() cfg80211_mgmt_tx_status_ext() nl80211_frame_tx_status() genlmsg_multicast_netns() genlmsg_multicast_netns_filtered() nlmsg_multicast_filtered() netlink_broadcast_filtered() do_one_broadcast() netlink_broadcast_deliver() __netlink_sendskb() netlink_deliver_tap() __netlink_deliver_tap_skb() dev_queue_xmit() __dev_queue_xmit() ; with IRQS disabled ... spin_unlock_irqrestore(&local->queue_stop_reason_lock, flags) issues the warning (as reported by syzbot reproducer): WARNING: CPU: 2 PID: 5128 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 Fix this by implementing a two-phase skb reclamation in 'ieee80211_do_stop()', where actual work is performed outside of a section with interrupts disabled.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	5061b0c2b9066de426fbc63f1278d2210e789412 builds before 07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268; 5061b0c2b9066de426fbc63f1278d2210e789412 builds before 04f75f5bae33349283d6886901d9acd2f110c024; from 5061b0c2b9066de426fbc63f1278d2210e789412 before f232916fab67ca1c3425926df4a866e59ff26908; from 5061b0c2b9066de426fbc63f1278d2210e789412 before acb53a716e492a02479345157c43f21edc8bc64b; from 5061b0c2b9066de426fbc63f1278d2210e789412 before db5ca4b42ccfa42d2af7b335ff12578e57775c02; 5061b0c2b9066de426fbc63f1278d2210e789412 builds before 058c9026ad79dc98572442fd4c7e9a36aba6f596; from 5061b0c2b9066de426fbc63f1278d2210e789412 before eab272972cffff9cd973b8e4055a8e81c64f7e6a; from 5061b0c2b9066de426fbc63f1278d2210e789412 before ad4b7068b101fbbb4a9ca4b99b25eb051a9482ec; and 1 more ranges	CNA record
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1.1	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.32 before 5.10.227; from 5.11 before 5.15.168; from 5.16 before 6.1.113; from 6.2 before 6.6.54; from 6.7 before 6.10.13; from 6.11 before 6.11.2	NVD

References

https://git.kernel.org/stable/c/07eb0bd7b0a8abed9d45e0f567c9af1dc83e5268
https://git.kernel.org/stable/c/04f75f5bae33349283d6886901d9acd2f110c024
https://git.kernel.org/stable/c/f232916fab67ca1c3425926df4a866e59ff26908patch
https://git.kernel.org/stable/c/acb53a716e492a02479345157c43f21edc8bc64bpatch
https://git.kernel.org/stable/c/db5ca4b42ccfa42d2af7b335ff12578e57775c02patch
https://git.kernel.org/stable/c/058c9026ad79dc98572442fd4c7e9a36aba6f596patch
https://git.kernel.org/stable/c/eab272972cffff9cd973b8e4055a8e81c64f7e6apatch
https://git.kernel.org/stable/c/ad4b7068b101fbbb4a9ca4b99b25eb051a9482ecpatch
https://git.kernel.org/stable/c/9d301de12da6e1bb069a9835c38359b8e8135121patch
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
https://cert-portal.siemens.com/productcert/html/ssa-265688.html
https://cert-portal.siemens.com/productcert/html/ssa-355557.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.