Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52777

wifi: ath11k: fix gtk offload status event locking

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix gtk offload status event locking The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11k_mac_get_arvif_by_vdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to < 0cf7577b6b3153b4b49deea9719fe43f96469c6daffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to < cf9c7d783a2bf9305df4ef5b93d9063a52e18fcaaffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to < e83246ecd3b193f8d91fce778e8a5ba747fc7d8aaffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to < 1dea3c0720a146bd7193969f2847ccfed5be2221affected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.64 to ≤ 6.1.*unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References