In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix dfs radar event locking
The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11kmacgetarbypdevid() was not marked as a read-side critical section.
Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.
Compile tested only.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f882f51905517575c9f793a3dff567af90ef9a10",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-007036eb",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1293.0,
"function_hash": "77979997462016794872292731243737115970"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21ebb0aba580d347e12f01ce5f6e75044427b3d5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-69ed6017",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f882f51905517575c9f793a3dff567af90ef9a10",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-7089652b",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca420ac4f9451f22347bae44b18ab47ba2c267ec",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-7c3984ce",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd878e1750190a612b5de2af357cca422ec0822",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-83b9b96a",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b6c14833165f689cc5928574ebafe52bbce5f1e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-859b20ba",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21ebb0aba580d347e12f01ce5f6e75044427b3d5",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-8ad56752",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1299.0,
"function_hash": "258314282705421634440942568648957361393"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426e718ce9ba60013364a54233feee309356cb82",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-95ce951b",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1293.0,
"function_hash": "77979997462016794872292731243737115970"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b6c14833165f689cc5928574ebafe52bbce5f1e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-b1f07fbe",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1299.0,
"function_hash": "258314282705421634440942568648957361393"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426e718ce9ba60013364a54233feee309356cb82",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-b4c6bfb2",
"target": {
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"83801019806810213707691080078266784900",
"48718150938880393405144523829932877564",
"339564595298927637839933843250567393856",
"147167160744407475901207942316012921800",
"252870869309040293906400817564233783891",
"157892592474693948655302639961017002062",
"92042057130272095780102752465710673192"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd878e1750190a612b5de2af357cca422ec0822",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-b5084893",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1299.0,
"function_hash": "258314282705421634440942568648957361393"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca420ac4f9451f22347bae44b18ab47ba2c267ec",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52798-ca7c551c",
"target": {
"function": "ath11k_wmi_pdev_dfs_radar_detected_event",
"file": "drivers/net/wireless/ath/ath11k/wmi.c"
},
"digest": {
"length": 1293.0,
"function_hash": "77979997462016794872292731243737115970"
},
"signature_type": "Function"
}
]