CVE-2023-52769

HIGH

Linux Kernel 6.3-6.5.12 - Use-After-Free in ath12k HTT MLO-Offset Event Handler

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix htt mlo-offset event locking The ath12k active pdevs are protected by RCU but the htt mlo-offset event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/d908ca431e20b0e4bfc5d911d1744910ed779bdb

Patch

https://git.kernel.org/stable/c/afd3425bd69610f318403084fe491e24a1357fb9

Patch

https://git.kernel.org/stable/c/6afc57ea315e0f660b1f870a681737bb7b71faef

Scores

CVSS v3 7.8

EPSS 0.0024

EPSS Percentile 14.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-416

Status published

Products (9)

Linux/Linux < 6.3

Linux/Linux 6.3

Linux/Linux 6.5.13 - 6.5.*

Linux/Linux 6.6.3 - 6.6.*

Linux/Linux 6.7

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - 6afc57ea315e0f660b1f870a681737bb7b71faef

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - afd3425bd69610f318403084fe491e24a1357fb9

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - d908ca431e20b0e4bfc5d911d1744910ed779bdb

linux/linux_kernel 6.3 - 6.5.13

Published May 21, 2024

Tracked Since Feb 18, 2026