Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_completion()', always wait for both (regular and wowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()' has failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue 'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually the wowlan one) is still in progress, causing UAF detected by KASAN.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
c8e5695eae9959fc5774c0f490f2450be8bad3de to < a0c1e2da652cf70825739bc12d49ea15805690bfaffectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < ceaab3fb64d6a5426a3db8f87f3e5757964f2532affectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < 7887ad11995a4142671cc49146db536f923c8568affectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < 1b8178a2ae272256ea0dc4f940320a81003535e2affectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < 9432185540bafd42b7bfac6e6ef2f0a0fb4be447affectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < e9a78d9417e167410d6fb83c4e908b077ad8ba6daffectedc8e5695eae9959fc5774c0f490f2450be8bad3de to < 0e735a4c6137262bcefe45bb52fde7b1f5fc6c4daffected
Linux Linux
Default version status: affected
5.6affected0 to < 5.6unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.54 to ≤ 6.6.*unaffected6.10.13 to ≤ 6.10.*unaffected6.11.2 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a0c1e2da652cf70825739bc12d49ea15805690bf ↗
- https://git.kernel.org/stable/c/ceaab3fb64d6a5426a3db8f87f3e5757964f2532 ↗
- https://git.kernel.org/stable/c/7887ad11995a4142671cc49146db536f923c8568 ↗
- https://git.kernel.org/stable/c/1b8178a2ae272256ea0dc4f940320a81003535e2 ↗
- https://git.kernel.org/stable/c/9432185540bafd42b7bfac6e6ef2f0a0fb4be447 ↗
- https://git.kernel.org/stable/c/e9a78d9417e167410d6fb83c4e908b077ad8ba6d ↗
- https://git.kernel.org/stable/c/0e735a4c6137262bcefe45bb52fde7b1f5fc6c4d ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-355557.html ↗