CVE-2024-47718 – This CVE describes a use-after-free vulnerabili... (How to Fix)

Q: What is the severity of CVE-2024-47718?

CVE-2024-47718 has a CVSS score of 7.8 (HIGH). This CVE describes a use-after-free vulnerability in the Linux kernel's rtw88 WiFi driver. If exploited, it could allow local attackers to crash the system or potentially execute arbitrary code. Systems using Realtek rtw88 WiFi chipsets with affected kernel versions are vulnerable.

📋 TL;DR

This CVE describes a use-after-free vulnerability in the Linux kernel's rtw88 WiFi driver. If exploited, it could allow local attackers to crash the system or potentially execute arbitrary code. Systems using Realtek rtw88 WiFi chipsets with affected kernel versions are vulnerable.

💻 Affected Systems

Products:

Linux kernel with rtw88 WiFi driver

Versions: Kernel versions before the fix commits (specific versions vary by distribution)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects systems with Realtek rtw88 WiFi chipsets using the USB interface

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation leading to kernel compromise and full system control

🟠

Likely Case

Kernel panic or system crash causing denial of service

🟢

If Mitigated

System remains stable with no impact if patched or workaround applied

🌐 Internet-Facing: LOW - Requires local access to exploit

🏢 Internal Only: MEDIUM - Local attackers on the system could exploit this vulnerability

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and timing conditions during USB WiFi device initialization/failure

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits 0e735a4c6137, 1b8178a2ae27, 7887ad11995a, 9432185540ba, or a0c1e2da652c

Vendor Advisory: https://git.kernel.org/stable/c/0e735a4c6137262bcefe45bb52fde7b1f5fc6c4d

Restart Required: Yes

Instructions:

1. Update Linux kernel to version containing the fix commits. 2. Reboot system. 3. Verify kernel version and that rtw88 module loads properly.

🔧 Temporary Workarounds

Disable rtw88 module

linux

Prevent loading of vulnerable rtw88 WiFi driver

echo 'blacklist rtw88' | sudo tee /etc/modprobe.d/blacklist-rtw88.conf
sudo rmmod rtw88
sudo update-initramfs -u

Avoid USB WiFi devices using rtw88

linux

Use alternative WiFi hardware not requiring rtw88 driver

🧯 If You Can't Patch

Restrict physical and local user access to systems with vulnerable configurations
Monitor for kernel panics or crashes related to WiFi initialization

🔍 How to Verify

Check if Vulnerable:

Check if rtw88 module is loaded and kernel version is before fix: 'lsmod | grep rtw88' and 'uname -r'

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version includes fix commits and rtw88 module loads without issues

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
KASAN use-after-free reports in dmesg
WiFi initialization failures

Network Indicators:

Unexpected WiFi disconnections during boot/initialization

SIEM Query:

search 'kernel:.*rtw88.*UAF' OR 'kernel:.*KASAN.*use-after-free.*rtw88' in system logs

📊 Metadata

CVE ID: CVE-2024-47718

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

Published: October 21, 2024

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-47718, you might also want to check these: