CVE-2023-52776

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52776
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as RCU read-side critical sections to avoid any potential use-after-free issues. Note that the temperature event handler looks like a place holder currently but would still trigger an RCU lockdep splat. Compile tested only.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 Patch
https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 Patch
https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e Patch
https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 Patch
https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 Patch
https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

02 Apr 2025, 15:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 - () https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 - Patch
References () https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 - () https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 - Patch
References () https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e - () https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-416
First Time Linux linux Kernel
Linux

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 - () https://git.kernel.org/stable/c/69bd216e049349886405b1c87a55dce3d35d1ba7 -
References () https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 - () https://git.kernel.org/stable/c/774de37c147fea81f2c2e4be5082304f4f71d535 -
References () https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e - () https://git.kernel.org/stable/c/d7a5f7f76568e48869916d769e28b9f3ca70c78e -

31 Oct 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.9
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: wifi: ath12k: corrige el bloqueo de eventos de temperatura y radar dfs. Los pdev activos de ath12k están protegidos por RCU, pero el código de manejo de eventos de temperatura y radar DFS que llama a ath12k_mac_get_ar_by_pdev_id() no estaba marcado como una sección crítica del lado de lectura. Marque el código en cuestión como secciones críticas del lado de lectura de RCU para evitar posibles problemas de use after free. Tenga en cuenta que el controlador de eventos de temperatura actualmente parece un marcador de posición, pero aún así activaría un bloqueo de bloqueo de RCU. Compilación probada únicamente.

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-04-02 15:03

NVD link : CVE-2023-52776

Mitre link : CVE-2023-52776

CVE.ORG link : CVE-2023-52776

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free