CVE-2024-27391

wifi: wilc1000: do not realloc workqueue everytime an interface is added

published May 1, 2024

CVSS
—
EPSS
0%
Percentile
18.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: wilc1000: do not realloc workqueue everytime an interface is added

Commit 09ed8bfc5215 ("wilc1000: Rename workqueue from "WILC_wq" to

"NETDEV-wq"") moved workqueue creation in wilc_netdev_ifc_init in order to

set the interface name in the workqueue name. However, while the driver

needs only one workqueue, the wilc_netdev_ifc_init is called each time we

add an interface over a phy, which in turns overwrite the workqueue with a

new one. This can be observed with the following commands:

for i in $(seq 0 10)

do

iw phy phy0 interface add wlan1 type managed

iw dev wlan1 del

done

ps -eo pid,comm|grep wlan

39 kworker/R-wlan0

98 kworker/R-wlan1

102 kworker/R-wlan1

105 kworker/R-wlan1

108 kworker/R-wlan1

111 kworker/R-wlan1

114 kworker/R-wlan1

117 kworker/R-wlan1

120 kworker/R-wlan1

123 kworker/R-wlan1

126 kworker/R-wlan1

129 kworker/R-wlan1

Fix this leakage by putting back hif_workqueue allocation in

wilc_cfg80211_init. Regarding the workqueue name, it is indeed relevant to

set it lowercase, however it is not attached to a specific netdev, so

enforcing netdev name in the name is not so relevant. Still, enrich the

name with the wiphy name to make it clear which phy is using the workqueue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00272 · 18.5th percentile
Published
2024-05-01T13:05Z
EPSS history
Timeline
  • 01 MAY 13:05Z
    wifi: wilc1000: do not realloc workqueue everytime an interface is added
    cvelistv5