01 Record

CVE-2024-26897

wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.19% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 8.6% of scored records. A rank, not a probability.

NVD base score

4.7 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-04-17 10:27Z2 YR AGO

Last updated

2026-05-23 15:39Z3 MO AGO

Reserved

2024-02-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class

Data version

5.2

Document digest

d24bbd47a42a868db7716da249f7173f2dacfa1735cc2aee6d8e43a97984ea94

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux78c8397132dd4735ac6a7b5a651302f0b9f264ad to < 1bc5461a21c56a36e2a7d81e152b90ce019a3905, 735aefae7b68025cd04c482a940c0f6fc6797a63 to < f8ff4b4df71e87f609be0cc37d92e918107f9b90, 8b3046abc99eefe11438090bcc4ec3a3994b55d0 to < 74d0639261dd795dce958d1b14815bdcbb48a715, 8b3046abc99eefe11438090bcc4ec3a3994b55d0 to < a015fbf698c8957aa5fbeefc5c59dd2cf3107298, 8b3046abc99eefe11438090bcc4ec3a3994b55d0 to < ac90e22e735bac44f74b5161fb096fbeb0ff8bc2, 8b3046abc99eefe11438090bcc4ec3a3994b55d0 to < 4afa0246656d5680c8a4c3fb37ba6570c4ab819b, 8b3046abc99eefe11438090bcc4ec3a3994b55d0 to < 24355fcb0d4cbcb6ddda262596558e8cfba70f11, 7bbc1a50a7963f14048f0e54b0b73159f86d4ea3, 5.10.136 to < 5.10.214, 5.15.17 to < 5.15.153, 5.16.3 to < 5.17, 5.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1bc5461a21c56a36e2a7d81e152b90ce019a3905
git.kernel.orghttps://git.kernel.org/stable/c/f8ff4b4df71e87f609be0cc37d92e918107f9b90
git.kernel.orghttps://git.kernel.org/stable/c/74d0639261dd795dce958d1b14815bdcbb48a715
git.kernel.orghttps://git.kernel.org/stable/c/a015fbf698c8957aa5fbeefc5c59dd2cf3107298
git.kernel.orghttps://git.kernel.org/stable/c/ac90e22e735bac44f74b5161fb096fbeb0ff8bc2
git.kernel.orghttps://git.kernel.org/stable/c/4afa0246656d5680c8a4c3fb37ba6570c4ab819b
git.kernel.orghttps://git.kernel.org/stable/c/24355fcb0d4cbcb6ddda262596558e8cfba70f11
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

01 Record index

CVE-2024-26897

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-26897

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References