CVE-2023-52798

wifi: ath11k: fix dfs radar event locking

State: Published
Severity: 8.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix dfs radar event locking

The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	d5c65159f2895379e11ca13f62feabe93278985d to before f882f51905517575c9f793a3dff567af90ef9a10Affected d5c65159f2895379e11ca13f62feabe93278985d to before 426e718ce9ba60013364a54233feee309356cb82Affected d5c65159f2895379e11ca13f62feabe93278985d to before ca420ac4f9451f22347bae44b18ab47ba2c267ecAffected d5c65159f2895379e11ca13f62feabe93278985d to before 1fd878e1750190a612b5de2af357cca422ec0822Affected d5c65159f2895379e11ca13f62feabe93278985d to before 21ebb0aba580d347e12f01ce5f6e75044427b3d5Affected d5c65159f2895379e11ca13f62feabe93278985d to before 3b6c14833165f689cc5928574ebafe52bbce5f1eAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

d5c65159f2895379e11ca13f62feabe93278985d to before f882f51905517575c9f793a3dff567af90ef9a10Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 426e718ce9ba60013364a54233feee309356cb82Affected
d5c65159f2895379e11ca13f62feabe93278985d to before ca420ac4f9451f22347bae44b18ab47ba2c267ecAffected
d5c65159f2895379e11ca13f62feabe93278985d to before 1fd878e1750190a612b5de2af357cca422ec0822Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 21ebb0aba580d347e12f01ce5f6e75044427b3d5Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 3b6c14833165f689cc5928574ebafe52bbce5f1eAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.