What’s Vulnerable › Vulnerabilities

CVE-2024-36970: wifi: iwlwifi: Use request_module_nowait

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-06-08 · updated 2026-06-17
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Use request_module_nowait This appears to work around a deadlock regression that came in with the LED merge in 6.9. The deadlock happens on my system with 24 iwlwifi radios, so maybe it something like all worker threads are busy and some work that needs to complete cannot complete. [also remove unnecessary "load_module" var and now-wrong comment]

Affected products

• Linux kernel: from 6.9 before 6.9.2 — fixed in 6.9.2

How to fix

Upgrade to a fixed version: Linux kernel 6.9.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3d913719df14c28c4d3819e7e6d150760222bda4
• https://git.kernel.org/stable/c/d20013259539e2fde2deeac85354851097afdf9e
• https://git.kernel.org/stable/c/3d913719df14c28c4d3819e7e6d150760222bda4
• https://git.kernel.org/stable/c/d20013259539e2fde2deeac85354851097afdf9e

Get alerted when CVE-2024-36970 or the next vulnerability affects your stack