CVE-2022-48784

cfg80211: fix race in netlink owner interface destruction

State
Published
Severity
Not scored
Published
Jul 16, 2024
Updated
May 23, 2026
Reserved
Jun 20, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cfg80211: fix race in netlink owner interface destruction

My previous fix here to fix the deadlock left a race where the exact same deadlock (see the original commit referenced below) can still happen if cfg80211_destroy_ifaces() already runs while nl80211_netlink_notify() is still marking some interfaces as nl_owner_dead.

The race happens because we have two loops here - first we dev_close() all the netdevs, and then we destroy them. If we also have two netdevs (first one need only be a wdev though) then we can find one during the first iteration, close it, and go to the second iteration -- but then find two, and try to destroy also the one we didn't close yet.

Fix this by only iterating once.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ea6b2098dd02789f68770fd3d5a373732207be2f to before 241e633cb379c4f332fc1baf2abec95ec840cbebAffected
  • ea6b2098dd02789f68770fd3d5a373732207be2f to before c979f792a2baf6d0f3419587668a1a6eba46a3d2Affected
  • ea6b2098dd02789f68770fd3d5a373732207be2f to before f0a6fd1527067da537e9c48390237488719948edAffected
  • 2e4f97122f3a9df870dfe9671994136448890768Affected
  • 5.12.1 to before 5.13Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.25 through 5.15.*Not affected
  • 5.16.11 through 5.16.*Not affected
  • 5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.