Security readout for executives and security teams
Plain-English summary
This Linux kernel issue lets an oversized Wi-Fi transmit queue setting cause CPU soft lockups, creating a denial-of-service risk. The evidence points to availability impact rather than data theft. There is no KEV listing and no cited source showing active exploitation.
Executive priority
Handle through normal kernel patch management, with higher priority for Wi-Fi-dependent endpoints, embedded systems, and operational environments. The business risk is service disruption, not confirmed compromise. Lack of CVSS and exploit evidence lowers urgency but does not remove patching need.
Technical view
CVE-2024-42114 is in Linux cfg80211/mac80211 handling of NL80211_ATTR_TXQ_QUANTUM. syzbot showed that setting an extreme value could stall dequeue processing and trigger watchdog soft lockups. Kernel stable commits restrict accepted quantum values.
Likely exposure
Exposure is most relevant to Linux systems using cfg80211/mac80211 Wi-Fi functionality, including distributions or embedded products that have not taken the stable fixes. The provided sources list Linux kernel versions and downstream Debian and Siemens advisories, but do not define privilege requirements.
Exploitation context
The source bundle describes syzbot-triggered soft lockups and provides kernel fixes. It does not cite public exploitation, ransomware use, KEV inclusion, or a complete attacker precondition model. Treat exploitation status as unconfirmed.
Researcher notes
The record links the flaw to unchecked NL80211_ATTR_TXQ_QUANTUM values and a prior sch_fq quantum validation issue. Sources identify stable commits, Debian LTS updates, and Siemens guidance, but omit CVSS, CWE, and attacker privilege details.
Mitigation direction
- Apply vendor kernel updates that include the referenced stable fixes.
- Review Debian LTS advisories if running affected Debian kernels.
- Review Siemens SSA-265688 for affected Siemens products and vendor-specific guidance.
- Prioritize internet-managed or operational systems where Wi-Fi availability matters.
- If no vendor package exists, track upstream stable kernel backports.
Validation and detection
- Inventory Linux kernel versions against the affected versions in the CVE record.
- Check whether cfg80211/mac80211 Wi-Fi functionality is present and used.
- Confirm installed kernels include one of the referenced stable fix commits or vendor backport.
- Review Debian and Siemens advisories for environment-specific affected product statements.
- Monitor kernel logs for watchdog soft lockup messages on Wi-Fi-enabled hosts.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-42114 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/80ac0cc9c0bef984e29637b1efa93d7214b42f53CVE reference, Linux
- https://git.kernel.org/stable/c/33ac5a4eb3d4bea2146658f1b6d1fa86d62d2b22CVE reference, Linux
- https://git.kernel.org/stable/c/3fc06f6d142d2840735543216a60d0a8c345bdecCVE reference, Linux
- https://git.kernel.org/stable/c/8a3ac7fb36962c34698f884bd697938054ff2afaCVE reference, Linux
- https://git.kernel.org/stable/c/e87c2f098f52aa2fe20258a5bb1738d6a74e9ed7CVE reference, Linux
- https://git.kernel.org/stable/c/d1cba2ea8121e7fdbe1328cea782876b1dd80993CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.htmlCVE reference, CVE
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.htmlCVE reference, CVE
- https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlCVE reference, siemens-SADP
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.