Riskcovery

CVE-2023-52777

wifi: ath11k: fix gtk offload status event locking

State
Published
Severity
7.8 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix gtk offload status event locking

The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11k_mac_get_arvif_by_vdev_id() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to before 0cf7577b6b3153b4b49deea9719fe43f96469c6dAffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to before cf9c7d783a2bf9305df4ef5b93d9063a52e18fcaAffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to before e83246ecd3b193f8d91fce778e8a5ba747fc7d8aAffected
  • a16d9b50cfbaf112401b8e5ccfa852709f498cd4 to before 1dea3c0720a146bd7193969f2847ccfed5be2221Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.64 through 6.1.*Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.