CVE-2023-52777: wifi: ath11k: fix gtk offload status event locking
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix gtk offload status event locking
The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11kmacgetarvifbyvdevid() was not marked as a read-side critical section.
Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.
Compile tested only.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix gtk offload status event locking
The Linux kernel CVE team has assigned CVE-2023-52777 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052152-CVE-2023-52777-2f32@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52777?
CVE-2023-52777 has not been assigned a specific severity level but addresses a locking issue in the ath11k module of the Linux kernel.
How do I fix CVE-2023-52777?
To fix CVE-2023-52777, you should update the kernel to version 6.1.64, 6.5.13, 6.6.3, or 6.7 provided by Red Hat.
Which Linux kernel versions are affected by CVE-2023-52777?
CVE-2023-52777 affects Linux kernel versions between 5.19 and 6.1.64, and also between 6.2 and 6.5.13.
What component of the Linux kernel is involved in CVE-2023-52777?
CVE-2023-52777 involves the ath11k component responsible for Wi-Fi functionality in the Linux kernel.
Is CVE-2023-52777 a remote code execution vulnerability?
CVE-2023-52777 does not describe a remote code execution vulnerability but rather a locking issue in event handling.