Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2023-52776
HistoryMay 21, 2024 - 4:15 p.m.

CVE-2023-52776

2024-05-2116:15:16
Debian Security Bug Tracker
security-tracker.debian.org
8
linux kernel
wifi
vulnerability
ath12k
rcu
use-after-free
temperature event

AI Score

6.8

Confidence

High

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as RCU read-side critical sections to avoid any potential use-after-free issues. Note that the temperature event handler looks like a place holder currently but would still trigger an RCU lockdep splat. Compile tested only.

AI Score

6.8

Confidence

High

EPSS

0

Percentile

15.5%