VDB

CISA-2023-52777

CISA-2023-52777 PUBLISHED

Reported by Linux · Published May 21, 2024

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix gtk offload status event locking The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11k_mac_get_arvif_by_vdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

Affected Products

VendorProductVersions
LinuxLinuxa16d9b50cfbaf112401b8e5ccfa852709f498cd4, a16d9b50cfbaf112401b8e5ccfa852709f498cd4, a16d9b50cfbaf112401b8e5ccfa852709f498cd4
LinuxLinux5.19, 0, 6.1.64
LinuxLinuxa16d9b50cfbaf112401b8e5ccfa852709f498cd4, a16d9b50cfbaf112401b8e5ccfa852709f498cd4, a16d9b50cfbaf112401b8e5ccfa852709f498cd4

Timeline

  • May 21, 2024 CVE Published
  • Dec 19, 2024 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›