CVE-2024-43844: 
Linux Ubuntu vulnerability analysis and mitigation

A vulnerability in the Linux kernel's rtw89 WiFi driver was discovered, identified as CVE-2024-43844. The issue involves a buffer overflow in the GTK (Group Temporal Key) offload H2C (Host-to-Controller) skbuff handling. The vulnerability affects Linux kernel versions from 6.10 up to (excluding) 6.10.3 (NVD).

The vulnerability stems from incorrectly sizing an skb (socket buffer) in the rtw89_fw_h2c_wow_gtk_ofld function, where the code mistakenly allocated a buffer larger than skb->end allows. This resulted in a kernel BUG at net/core/skbuff.c:192 when attempting to use skb_put operations. The issue has a CVSS v3.1 base score of 5.5 (Medium) with vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

When triggered, this vulnerability causes a kernel panic, leading to system crashes and denial of service conditions. The issue specifically affects systems using the rtw89 wireless driver during WiFi operations involving GTK offload functionality (Kernel Patch).

The vulnerability requires local access and can be triggered during the WiFi resume operation when GTK offload is being processed. The issue manifests specifically in the rtw89_fw_h2c_wow_gtk_ofld function during system resume operations (Kernel Patch).

The issue has been fixed in the Linux kernel through a patch that corrects the skb buffer handling in the rtw89_fw_h2c_wow_gtk_ofld function. The fix removes unnecessary buffer allocation when GTK offload is disabled (Kernel Patch).