CVE-2023-52776CWE-416

CVE-2023-52776

High · published May 21, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix dfs-radar and temperature event locking

The ath12k active pdevs are protected by RCU but the DFS-radar and

temperature event handling code calling ath12k_mac_get_ar_by_pdev_id()

was not marked as a read-side critical section.

Mark the code in question as RCU read-side critical sections to avoid

any potential use-after-free issues.

Note that the temperature event handler looks like a place holder

currently but would still trigger an RCU lockdep splat.

Compile tested only.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00857 · 58.0th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-21T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (6)
EPSS history
Timeline
  • 21 MAY 15:30Z
    wifi: ath12k: fix dfs-radar and temperature event locking
    cvelistv5