CVE-2023-52798

HIGH

Linux Kernel 5.6-5.10.202 - Use-After-Free in WiFi ath11k DFS Radar Event Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

References (6)

Core 6

Scores

CVSS v3 8.8
EPSS 0.0100
EPSS Percentile 58.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (15)
Linux/Linux < 5.6
Linux/Linux 5.10.202 - 5.10.*
Linux/Linux 5.15.140 - 5.15.*
Linux/Linux 5.6
Linux/Linux 6.1.64 - 6.1.*
Linux/Linux 6.5.13 - 6.5.*
Linux/Linux 6.6.3 - 6.6.*
Linux/Linux 6.7
Linux/Linux d5c65159f2895379e11ca13f62feabe93278985d - 1fd878e1750190a612b5de2af357cca422ec0822
Linux/Linux d5c65159f2895379e11ca13f62feabe93278985d - 21ebb0aba580d347e12f01ce5f6e75044427b3d5
... and 5 more
Published May 21, 2024
Tracked Since Feb 18, 2026