CVE-2023-52776

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-52776
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52776.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52776
Downstream
Related
Published
2024-05-21T15:30:56.906Z
Modified
2026-03-23T05:05:01.508455302Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
wifi: ath12k: fix dfs-radar and temperature event locking
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix dfs-radar and temperature event locking

The ath12k active pdevs are protected by RCU but the DFS-radar and temperature event handling code calling ath12kmacgetarbypdevid() was not marked as a read-side critical section.

Mark the code in question as RCU read-side critical sections to avoid any potential use-after-free issues.

Note that the temperature event handler looks like a place holder currently but would still trigger an RCU lockdep splat.

Compile tested only.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52776.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d889913205cf7ebda905b1e62c5867ed4e39f6c2
Fixed
774de37c147fea81f2c2e4be5082304f4f71d535
Fixed
d7a5f7f76568e48869916d769e28b9f3ca70c78e
Fixed
69bd216e049349886405b1c87a55dce3d35d1ba7

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52776.json"