CVE-2023-52800
MEDIUMLinux Kernel 5.6-5.10.202 - Use-After-Free in ath11k HTT Pktlog Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.
References (6)
Core 6
Core References
Scores
CVSS v3
4.4
EPSS
0.0023
EPSS Percentile
13.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-416
Status
published
Products (15)
Linux/Linux
< 5.6
Linux/Linux
5.10.202 - 5.10.*
Linux/Linux
5.15.140 - 5.15.*
Linux/Linux
5.6
Linux/Linux
6.1.64 - 6.1.*
Linux/Linux
6.5.13 - 6.5.*
Linux/Linux
6.6.3 - 6.6.*
Linux/Linux
6.7
Linux/Linux
d5c65159f2895379e11ca13f62feabe93278985d - 03ed26935bebf6b6fd8a656490bf3dcc71b72679
Linux/Linux
d5c65159f2895379e11ca13f62feabe93278985d - 3a51e6b4da71fdfa43ec006d6abc020f3e22d14e
... and 5 more
Published
May 21, 2024
Tracked Since
Feb 18, 2026