CVE-2023-52800

MEDIUM

Linux Kernel 5.6-5.10.202 - Use-After-Free in ath11k HTT Pktlog Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

Scores

CVSS v3 4.4
EPSS 0.0023
EPSS Percentile 13.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-416
Status published
Products (15)
Linux/Linux < 5.6
Linux/Linux 5.10.202 - 5.10.*
Linux/Linux 5.15.140 - 5.15.*
Linux/Linux 5.6
Linux/Linux 6.1.64 - 6.1.*
Linux/Linux 6.5.13 - 6.5.*
Linux/Linux 6.6.3 - 6.6.*
Linux/Linux 6.7
Linux/Linux d5c65159f2895379e11ca13f62feabe93278985d - 03ed26935bebf6b6fd8a656490bf3dcc71b72679
Linux/Linux d5c65159f2895379e11ca13f62feabe93278985d - 3a51e6b4da71fdfa43ec006d6abc020f3e22d14e
... and 5 more
Published May 21, 2024
Tracked Since Feb 18, 2026