CVE-2023-52798

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix dfs radar event locking

The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < f882f51905517575c9f793a3dff567af90ef9a10affected
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < 426e718ce9ba60013364a54233feee309356cb82affected
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < ca420ac4f9451f22347bae44b18ab47ba2c267ecaffected
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < 1fd878e1750190a612b5de2af357cca422ec0822affected
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < 21ebb0aba580d347e12f01ce5f6e75044427b3d5affected
LinuxLinuxd5c65159f2895379e11ca13f62feabe93278985d < 3b6c14833165f689cc5928574ebafe52bbce5f1eaffected
LinuxLinux5.6affected
LinuxLinux0 < 5.6unaffected
LinuxLinux5.10.202 <= 5.10.*unaffected
LinuxLinux5.15.140 <= 5.15.*unaffected
LinuxLinux6.1.64 <= 6.1.*unaffected
LinuxLinux6.5.13 <= 6.5.*unaffected
LinuxLinux6.6.3 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References