CVE-2023-52800

wifi: ath11k: fix htt pktlog locking

State: Published
Severity: 4.4 Medium
Published: May 21, 2024
Updated: May 11, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix htt pktlog locking

The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	d5c65159f2895379e11ca13f62feabe93278985d to before 03ed26935bebf6b6fd8a656490bf3dcc71b72679Affected d5c65159f2895379e11ca13f62feabe93278985d to before 3a51e6b4da71fdfa43ec006d6abc020f3e22d14eAffected d5c65159f2895379e11ca13f62feabe93278985d to before e3199b3fac65c9f103055390b6fd07c5cffa5961Affected d5c65159f2895379e11ca13f62feabe93278985d to before 423762f021825b5e57c3d6f01ff96a9ff19cdcd8Affected d5c65159f2895379e11ca13f62feabe93278985d to before 69cede2a5a5f60e3f5602b901b52cb64edd2ea6cAffected d5c65159f2895379e11ca13f62feabe93278985d to before 3f77c7d605b29df277d77e9ee75d96e7ad145d2dAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.*Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

d5c65159f2895379e11ca13f62feabe93278985d to before 03ed26935bebf6b6fd8a656490bf3dcc71b72679Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 3a51e6b4da71fdfa43ec006d6abc020f3e22d14eAffected
d5c65159f2895379e11ca13f62feabe93278985d to before e3199b3fac65c9f103055390b6fd07c5cffa5961Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 423762f021825b5e57c3d6f01ff96a9ff19cdcd8Affected
d5c65159f2895379e11ca13f62feabe93278985d to before 69cede2a5a5f60e3f5602b901b52cb64edd2ea6cAffected
d5c65159f2895379e11ca13f62feabe93278985d to before 3f77c7d605b29df277d77e9ee75d96e7ad145d2dAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.