CVE-2024-26897

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete The ath9k_wmi_event_tasklet() used in ath9k_htc assumes that all the data structures have been fully initialised by the time it runs. However, because of the order in which things are initialised, this is not guaranteed to be the case, because the device is exposed to the USB subsystem before the ath9k driver initialisation is completed. We already committed a partial fix for this in commit: 8b3046abc99e ("ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet()") However, that commit only aborted the WMI_TXSTATUS_EVENTID command in the event tasklet, pairing it with an "initialisation complete" bit in the TX struct. It seems syzbot managed to trigger the race for one of the other commands as well, so let's just move the existing synchronisation bit to cover the whole tasklet (setting it at the end of ath9k_htc_probe_device() instead of inside ath9k_tx_init()).

• CWE-362

• https://git.kernel.org/stable/c/1bc5461a21c56a36e2a7d81e152b90ce019a3905Patch
• https://git.kernel.org/stable/c/24355fcb0d4cbcb6ddda262596558e8cfba70f11Patch
• https://git.kernel.org/stable/c/4afa0246656d5680c8a4c3fb37ba6570c4ab819bPatch
• https://git.kernel.org/stable/c/74d0639261dd795dce958d1b14815bdcbb48a715Patch
• https://git.kernel.org/stable/c/a015fbf698c8957aa5fbeefc5c59dd2cf3107298Patch
• https://git.kernel.org/stable/c/ac90e22e735bac44f74b5161fb096fbeb0ff8bc2Patch
• https://git.kernel.org/stable/c/f8ff4b4df71e87f609be0cc37d92e918107f9b90Patch
• https://git.kernel.org/stable/c/1bc5461a21c56a36e2a7d81e152b90ce019a3905Patch
• https://git.kernel.org/stable/c/24355fcb0d4cbcb6ddda262596558e8cfba70f11Patch
• https://git.kernel.org/stable/c/4afa0246656d5680c8a4c3fb37ba6570c4ab819bPatch
• https://git.kernel.org/stable/c/74d0639261dd795dce958d1b14815bdcbb48a715Patch
• https://git.kernel.org/stable/c/a015fbf698c8957aa5fbeefc5c59dd2cf3107298Patch
• https://git.kernel.org/stable/c/ac90e22e735bac44f74b5161fb096fbeb0ff8bc2Patch
• https://git.kernel.org/stable/c/f8ff4b4df71e87f609be0cc37d92e918107f9b90Patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlThird Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-265688.html

Published

Apr 17, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-26891In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-26892In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-26893In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-26894In the Linux kernel, the following vulnerability has been re…6
• CVE-2024-26895In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-26896In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-26898In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-26899In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-2690A vulnerability was found in SourceCodester Online Discussio…9.8
• CVE-2024-26900In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-26901In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-26902In the Linux kernel, the following vulnerability has been re…5.5