In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8xxxu: add cancelworksync() for c2hcmd_work
The workqueue might still be running, when the driver is stopped. To avoid a use-after-free, call cancelworksync() in rtl8xxxu_stop().
[ { "signature_version": "v1", "id": "CVE-2024-27052-1bf830c3", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-2c55454a", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-37ece57e", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-464f3825", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-4afb8d6e", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-56752e1c", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-84dd8bd2", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-87bab476", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-c543da7c", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59", "digest": { "line_hashes": [ "219132190210826883911124655100955877653", "305584256760298423665159219108664258703", "316977032147768306269290855378721317672" ], "threshold": 0.9 }, "signature_type": "Line", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-c73b8624", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-df2f5025", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-edb75e1f", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-fb924c4e", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false }, { "signature_version": "v1", "id": "CVE-2024-27052-fdb1f607", "target": { "file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c", "function": "rtl8xxxu_stop" }, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361", "digest": { "function_hash": "18945292945646334458739014580232488447", "length": 679.0 }, "signature_type": "Function", "deprecated": false } ]