CVE-2023-52769CWE-416

CVE-2023-52769

High · published May 21, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
25.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix htt mlo-offset event locking

The ath12k active pdevs are protected by RCU but the htt mlo-offset

event handling code calling ath12k_mac_get_ar_by_pdev_id() was not

marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid

any potential use-after-free issues.

Compile tested only.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00337 · 25.9th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-21T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (6)
EPSS history
Timeline
  • 21 MAY 15:30Z
    wifi: ath12k: fix htt mlo-offset event locking
    cvelistv5