CVE-2023-52777

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52777
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52777.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-52777
Downstream
Related
Published
2024-05-21T15:30:57Z
Modified
2025-10-15T04:28:15.316714Z
Summary
wifi: ath11k: fix gtk offload status event locking
Details

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix gtk offload status event locking

The ath11k active pdevs are protected by RCU but the gtk offload status event handling code calling ath11kmacgetarvifbyvdevid() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a16d9b50cfbaf112401b8e5ccfa852709f498cd4
Fixed
0cf7577b6b3153b4b49deea9719fe43f96469c6d
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a16d9b50cfbaf112401b8e5ccfa852709f498cd4
Fixed
cf9c7d783a2bf9305df4ef5b93d9063a52e18fca
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a16d9b50cfbaf112401b8e5ccfa852709f498cd4
Fixed
e83246ecd3b193f8d91fce778e8a5ba747fc7d8a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a16d9b50cfbaf112401b8e5ccfa852709f498cd4
Fixed
1dea3c0720a146bd7193969f2847ccfed5be2221

Affected versions

v5.*

v5.17
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.5.1
v6.5.10
v6.5.11
v6.5.12
v6.5.2
v6.5.3
v6.5.4
v6.5.5
v6.5.6
v6.5.7
v6.5.8
v6.5.9
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.2

Database specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "target": {
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Line",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf9c7d783a2bf9305df4ef5b93d9063a52e18fca",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "107615579370397009395674049520141608943",
                    "260054427657208953737191089604267565741",
                    "114892677842586521242540100668580965710",
                    "146682649603879887044841389320320548322",
                    "290122366238689602366814062623338823957",
                    "280151636320410184725465311644408204492",
                    "178392223844185207273207266624967511833",
                    "297492569378988030320244547099950249996",
                    "4930224300242218345332706961939923817",
                    "1991588129745739221873944789885658719",
                    "13928350748663158908908338875899803421",
                    "86352855878825089527816231946387161180",
                    "303358414230318510841800916453146859453"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2023-52777-0e97764a"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Line",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dea3c0720a146bd7193969f2847ccfed5be2221",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "107615579370397009395674049520141608943",
                    "260054427657208953737191089604267565741",
                    "114892677842586521242540100668580965710",
                    "146682649603879887044841389320320548322",
                    "290122366238689602366814062623338823957",
                    "280151636320410184725465311644408204492",
                    "178392223844185207273207266624967511833",
                    "297492569378988030320244547099950249996",
                    "4930224300242218345332706961939923817",
                    "1991588129745739221873944789885658719",
                    "13928350748663158908908338875899803421",
                    "86352855878825089527816231946387161180",
                    "303358414230318510841800916453146859453"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2023-52777-33002621"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "ath11k_wmi_gtk_offload_status_event",
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Function",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0cf7577b6b3153b4b49deea9719fe43f96469c6d",
            "deprecated": false,
            "digest": {
                "length": 1098.0,
                "function_hash": "275242592731652906807389799972246292514"
            },
            "id": "CVE-2023-52777-36143552"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Line",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e83246ecd3b193f8d91fce778e8a5ba747fc7d8a",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "107615579370397009395674049520141608943",
                    "260054427657208953737191089604267565741",
                    "114892677842586521242540100668580965710",
                    "146682649603879887044841389320320548322",
                    "290122366238689602366814062623338823957",
                    "280151636320410184725465311644408204492",
                    "178392223844185207273207266624967511833",
                    "297492569378988030320244547099950249996",
                    "4930224300242218345332706961939923817",
                    "1991588129745739221873944789885658719",
                    "13928350748663158908908338875899803421",
                    "86352855878825089527816231946387161180",
                    "303358414230318510841800916453146859453"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2023-52777-749366b8"
        },
        {
            "signature_version": "v1",
            "target": {
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Line",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0cf7577b6b3153b4b49deea9719fe43f96469c6d",
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "107615579370397009395674049520141608943",
                    "260054427657208953737191089604267565741",
                    "114892677842586521242540100668580965710",
                    "146682649603879887044841389320320548322",
                    "290122366238689602366814062623338823957",
                    "280151636320410184725465311644408204492",
                    "178392223844185207273207266624967511833",
                    "107027531986779722836287987962985228733",
                    "146552991878244224166775859100999680663",
                    "1991588129745739221873944789885658719",
                    "13928350748663158908908338875899803421",
                    "86352855878825089527816231946387161180",
                    "303358414230318510841800916453146859453"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2023-52777-81f4dbd8"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "ath11k_wmi_gtk_offload_status_event",
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Function",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cf9c7d783a2bf9305df4ef5b93d9063a52e18fca",
            "deprecated": false,
            "digest": {
                "length": 1094.0,
                "function_hash": "34260779679125573796036957080728810357"
            },
            "id": "CVE-2023-52777-8a8a7b44"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "ath11k_wmi_gtk_offload_status_event",
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Function",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1dea3c0720a146bd7193969f2847ccfed5be2221",
            "deprecated": false,
            "digest": {
                "length": 1094.0,
                "function_hash": "34260779679125573796036957080728810357"
            },
            "id": "CVE-2023-52777-9d8a4813"
        },
        {
            "signature_version": "v1",
            "target": {
                "function": "ath11k_wmi_gtk_offload_status_event",
                "file": "drivers/net/wireless/ath/ath11k/wmi.c"
            },
            "signature_type": "Function",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e83246ecd3b193f8d91fce778e8a5ba747fc7d8a",
            "deprecated": false,
            "digest": {
                "length": 1094.0,
                "function_hash": "34260779679125573796036957080728810357"
            },
            "id": "CVE-2023-52777-d88f68c2"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.1.64
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.5.13
Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.3