Security readout for executives and security teams
Plain-English summary
A flaw in the Linux rtw89 Wi-Fi driver can read beyond an internal handler table when processing a firmware event. Systems not using the affected driver are unlikely to be exposed. The supplied CVSS score is 8.8, reflecting potentially serious confidentiality, integrity, and availability impact, although the sources do not document demonstrated real-world consequences.
Executive priority
Treat this as a high-priority patching issue for Linux endpoints using rtw89 Wi-Fi hardware, especially devices operating near untrusted wireless peers. First establish whether the driver is present and loaded. Avoid organization-wide emergency action for Linux systems that do not use this driver, and do not assume exploitation without further evidence.
Technical view
An unimplemented RTW89_MAC_C2H_FUNC_READ_WOW_CAM event ID remained within a firmware-to-host event enumeration. The driver expected NUM_OF_RTW89_MAC_C2H_FUNC_WOW handlers, creating an out-of-bounds read during event dispatch. The kernel fix removes the unused ID. The supplied record identifies affected Linux 6.10–6.12 data, but its flattened version list does not establish precise distribution-specific ranges.
Likely exposure
Exposure is limited to Linux systems using the affected rtw89 wireless driver and vulnerable kernel code. The CVSS vector specifies adjacent-network reachability without privileges or user interaction. Exact exposure depends on hardware, loaded modules, kernel build, and vendor backports; the supplied version data is insufficient for definitive package-level conclusions.
Exploitation context
CISA KEV status is false, and the supplied sources provide no evidence of active exploitation or a public proof of concept. The record describes the underlying out-of-bounds read but does not document how an attacker could reliably trigger it or what practical impact has been demonstrated.
Researcher notes
The source attributes the defect to a mismatch between the WOW C2H event identifiers and implemented handler count. Coverity classified it as an out-of-bounds read. The CVSS claims high impact across confidentiality, integrity, and availability, but the bundle contains no crash trace, exploit analysis, affected chipset list, or distribution-specific package mapping.
Mitigation direction
- Apply a vendor-supported kernel update containing the referenced stable fix.
- Confirm distribution advisories or package changelogs address CVE-2024-47721.
- Prioritize systems actively loading rtw89 for wireless connectivity.
- If updating is delayed, consult vendor guidance for supported temporary risk reduction.
Validation and detection
- Inventory kernel versions and identify systems loading an rtw89 driver.
- Check kernel package changelogs for CVE-2024-47721 or the referenced commits.
- Verify the remediated kernel is running after installation and reboot.
- Review affected systems for unexplained wireless-driver faults or kernel crashes.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2024-47721 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H2.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
8.8HighVector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/10463308b9454f534d03300cf679bc4b3d078f46CVE reference, Linux
- https://git.kernel.org/stable/c/2c9c2d1a20916589497a7facbea3e82cabec4ab8CVE reference, Linux
- https://git.kernel.org/stable/c/56310ddb50b190b3390fdc974aec455d0a516bd2CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.