CVE-2024-27053CWE-476

CVE-2024-27053

High · published May 1, 2024

CVSS v3.1
8.8
EPSS
2%
Percentile
76.3
In the wild
Unconfirmed
What it is

🚨 A sneaky RCU usage flaw in the Linux kernel could spell disaster for wireless connections! 🔥 Think of it like a busy restaurant kitchen where the chef tries to grab an ingredient that isn’t on the shelf yet—if they reach too soon, it could cause a messy mix-up! Here, the kernel’s handling of wireless connections is a bit too hasty, leading to potential instability. This vulnerability could lead to system instability or unexpected behavior when connecting to wireless networks—imagine your device dropping connections at the worst possible moment, causing absolutely devastating interruptions! If exploited, attackers might leverage this flaw to disrupt network services, leading to serious performance issues.

Put simply

Think of it like a busy restaurant kitchen where the chef tries to grab an ingredient that isn’t on the shelf yet—if they reach too soon, it could cause a messy mix-up! Here, the kernel’s handling of wireless connections is a bit too hasty, leading to potential instability. The flaw arises from improper use of RCU (Read-Copy-Update) in the connect path of the wilc1000 driver, where dereferencing occurs outside a critical section. This can cause unstable behavior when parsing target BSS parameters during connection attempts.

What to do

This vulnerability could lead to system instability or unexpected behavior when connecting to wireless networks—imagine your device dropping connections at the worst possible moment, causing absolutely devastating interruptions! If exploited, attackers might leverage this flaw to disrupt network services, leading to serious performance issues. To remediate, patch to the latest version of the Linux kernel to ensure proper RCU usage. This involves moving the RCU dereference to the appropriate critical section while maintaining functionality. Check for any configuration options that may be affected by this change. You’ve got this! By following these steps, you’ll strengthen your wireless connections and keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01648 · 76.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-05-01T17:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 5.1, < 5.4.2735.4.273
linux/linux_kernel≥ 5.5, < 5.10.2145.10.214
linux/linux_kernel≥ 5.11, < 5.15.1535.15.153
linux/linux_kernel≥ 5.16, < 6.1.836.1.83
linux/linux_kernel≥ 6.2, < 6.6.236.6.23
linux/linux_kernel≥ 6.7, < 6.7.116.7.11
linux/linux_kernel≥ 6.8, < 6.8.26.8.2
debian/debian_linuxall versions—
References (18)
https://git.kernel.org/stable/c/205c50306acf58a335eb19fa84e40140f4fe814f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4bfd20d5f5c62b5495d6c0016ee6933bd3add7ce · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5800ec78775c0cd646f71eb9bf8402fb794807de · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/745003b5917b610352f52fe0d11ef658d6471ec2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b4bbf38c350acb6500cbe667b1e2e68f896e4b38 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d80fc436751cfa6b02a8eda74eb6cce7dadfe5a2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dd50d3ead6e3707bb0a5df7cc832730c93ace3a7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/e556006de4ea93abe2b46cba202a2556c544b8b2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/205c50306acf58a335eb19fa84e40140f4fe814f · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/4bfd20d5f5c62b5495d6c0016ee6933bd3add7ce · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/5800ec78775c0cd646f71eb9bf8402fb794807de · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/745003b5917b610352f52fe0d11ef658d6471ec2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/b4bbf38c350acb6500cbe667b1e2e68f896e4b38 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/d80fc436751cfa6b02a8eda74eb6cce7dadfe5a2 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/dd50d3ead6e3707bb0a5df7cc832730c93ace3a7 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/e556006de4ea93abe2b46cba202a2556c544b8b2 · af854a3a-2127-422b-91ae-364da2661108https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-265688.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 01 MAY 12:54Z
    wifi: wilc1000: fix RCU usage in connect path
    cvelistv5