PT-2024-27227 · Linux+2 · Linux Kernel+2

Published 2024-04-30 · Updated 2026-05-26 · CVE-2024-36970

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.9

Description The issue is related to a deadlock regression in the Linux kernel's wifi: iwlwifi module, which was introduced with the LED merge in version 6.9. The deadlock occurs when all worker threads are busy and some work that needs to complete cannot complete. This issue is observed on systems with 24 iwlwifi radios.

Recommendations To resolve the issue, update to a version of the Linux kernel that includes the fix for the deadlock regression, which is version 6.9 or later.

Note: Since the provided information does not specify distinct recommendations for different affected versions, the recommendation is general and applies to all versions prior to 6.9.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

BDU:2025-03053

CVE-2024-36970

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 914

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36970.json · Exploit
• https://cve.org/CVERecord?id=CVE-2024-36970 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:3383-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-36970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36970 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-36970 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3194-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-36970 · Vendor Advisory
• https://git.kernel.org/stable/c/d20013259539e2fde2deeac85354851097afdf9e · Patch
• https://bdu.fstec.ru/vul/2025-03053 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20047-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36970 · Vendor Advisory
• https://git.kernel.org/stable/c/3d913719df14c28c4d3819e7e6d150760222bda4 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2024-36970 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20044-1 · Vendor Advisory