PT-2024-29189 · Linux+11 · Linux Kernel+11

Leon Yen

+1

·

Published

2024-03-17

·

Updated

2026-05-26

·

CVE-2024-40977

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A potential deadlock situation can occur during chip recovery in the Linux kernel, specifically in the wifi: mt76: mt7921s module. This happens when the kernel worker reset work holds a lock and waits for the kernel thread stat worker to be parked, while stat worker waits for the release of the same lock. This causes a deadlock, resulting in hung tasks messages and possible rebooting of the device. The issue is resolved by preventing the execution of stat worker during chip recovery.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Locking

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2024:7000
ALSA-2024:7001
ALSA-2024:8617
ALSA-2025_16880
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-48942
BDU:2025-03022
CESA-2024_7000
CESA-2024_7001
CVE-2024-40977
DLA-4008-1
DSA-5731-1
INFSA-2024_7000
INFSA-2024_7001
INFSA-2024_8617
OESA-2024-1897
OPENSUSE-SU-2024_2947-1
RHSA-2024:7000
RHSA-2024:7001
RHSA-2024:8617
RHSA-2024_7000
RHSA-2024_7001
RHSA-2024_8617
RLSA-2024:7001
RLSA-2024:8617
SUSE-SU-2024:2894-1
SUSE-SU-2024:2939-1
SUSE-SU-2024:2947-1
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-6999-1
USN-6999-2
USN-7004-1
USN-7005-1
USN-7005-2
USN-7008-1
USN-7029-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu