PT-2024-21627 · Linux+8 · Linux Kernel+8

Published 2024-02-21 · Updated 2026-05-26 · CVE-2024-27056

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises in the resume code path of the Linux kernel, specifically in the wifi: iwlwifi: mvm module, where it assumes the TX queue for the offloading TID has been configured. If no packets have been sent on TID 0, the queue will not be allocated, causing a crash. The fix involves ensuring the queue exists at suspend time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

ALSA-2024:3618

ALSA-2024:3627

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

ALT-PU-2025-12647

AZL-67493

BDU:2025-12298

CESA-2024_3618

CESA-2024_3627

CVE-2024-27056

DLA-4193-1

DSA-5900-1

ECHO-DBFF-5827-12B1

INFSA-2024_3618

INFSA-2024_3627

OPENSUSE-SU-2024_1644-1

OPENSUSE-SU-2024_1659-1

OPENSUSE-SU-2024_1663-1

RHSA-2024:3618

RHSA-2024:3627

RHSA-2024_3618

RHSA-2024_3627

RHSA-2025:4509

RLSA-2024:3618

RLSA-2024:3627

SUSE-SU-2024:1644-1

SUSE-SU-2024:1659-1

SUSE-SU-2024:1663-1

SUSE-SU-2024:2135-1

SUSE-SU-2024:2203-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linux Kernel

Red Hat

Rocky Linux

Suse

References · 2466

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27056.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2024:1659-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3618 · Vendor Advisory
• https://git.kernel.org/stable/c/ed35a509390ef4011ea2226da5dd6f62b73873b5 · Patch
• https://git.kernel.org/stable/c/4903303f25f48b5a1e34e6324c7fae9ccd6b959a · Patch
• https://errata.almalinux.org/8/ALSA-2024-3627.html · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-3618.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1663-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2135-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-27056 · Security Note
• https://osv.dev/vulnerability/RLSA-2024:3618 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-27056 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-27056 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1644-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3627 · Vendor Advisory