CVE-2023-52798CWE-416

CVE-2023-52798

High · published May 21, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix dfs radar event locking

The ath11k active pdevs are protected by RCU but the DFS radar event

handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a

read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid

any potential use-after-free issues.

Compile tested only.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01026 · 63.3th percentile
Weakness
CWE-416 · Use After Free
Published
2024-05-21T20:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 5.10.2025.10.202
linux/linux_kernel≥ 5.11, < 5.15.1405.15.140
linux/linux_kernel≥ 5.16, < 6.1.646.1.64
linux/linux_kernel≥ 6.2, < 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (12)
EPSS history
Timeline
  • 21 MAY 15:31Z
    wifi: ath11k: fix dfs radar event locking
    cvelistv5