boxscore/security
CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-47721HIGH
Linux Linux — wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  N  H    7.1   .0032   24.8     —
AFFECTED
  Product  Versions                                    Fixed
  Linux    ff53fce5c78ba27ec7eb0baff7ef9648fde7ad8e –  —
  Linux    6.10 –                                      6.10.13
TIMELINE
  Sep 30  Reserved by Linux
  Oct 21  Published (CNA: Linux)
  Aug 4   RESCORED — CVE-2024-47721 (Linux). CVSS 8.8 → 7.1 (NVD).
CWE-125 · CNA: Linux · CVSS v3.1 · 3 references · NVD status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to prevent out-of-bounds reading The handler of firmware C2H event RTW89_MAC_C2H_FUNC_READ_WOW_CAM isn't implemented, but driver expects number of handlers is NUM_OF_RTW89_MAC_C2H_FUNC_WOW causing out-of-bounds access. Fix it by removing ID. Addresses-Coverity-ID: 1598775 ("Out-of-bounds read")

Lifecycle

Complete event history — 3 events, chronological
DateEventDetail
September 30, 2024ReservedReserved by Linux
October 21, 2024PublishedPublished (CNA: Linux)
August 4, 2026RESCOREDRESCORED — CVE-2024-47721 (Linux). CVSS 8.8 → 7.1 (NVD).

Affected

Affected products and packages — 2 rows
VendorProduct / PackageEcosystemVersion introducedFixed
LinuxLinuxff53fce5c78ba27ec7eb0baff7ef9648fde7ad8e
LinuxLinux6.106.10.13

Weaknesses

CWE-125

References (3)

Related

Authoritative record: CVE-2024-47721 at cve.org

Vendors: linux

Weaknesses: CWE-125

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-47721 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.