In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8xxxu: add cancelworksync() for c2hcmd_work
The workqueue might still be running, when the driver is stopped. To avoid a use-after-free, call cancelworksync() in rtl8xxxu_stop().
[
{
"id": "CVE-2024-27052-1bf830c3",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a"
},
{
"id": "CVE-2024-27052-2c55454a",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4"
},
{
"id": "CVE-2024-27052-37ece57e",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707"
},
{
"id": "CVE-2024-27052-464f3825",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e"
},
{
"id": "CVE-2024-27052-4afb8d6e",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361"
},
{
"id": "CVE-2024-27052-56752e1c",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707"
},
{
"id": "CVE-2024-27052-84dd8bd2",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e"
},
{
"id": "CVE-2024-27052-87bab476",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e"
},
{
"id": "CVE-2024-27052-c543da7c",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59"
},
{
"id": "CVE-2024-27052-c73b8624",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4"
},
{
"id": "CVE-2024-27052-df2f5025",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e"
},
{
"id": "CVE-2024-27052-edb75e1f",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a"
},
{
"id": "CVE-2024-27052-fb924c4e",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59"
},
{
"id": "CVE-2024-27052-fdb1f607",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c",
"function": "rtl8xxxu_stop"
},
"deprecated": false,
"digest": {
"length": 679.0,
"function_hash": "18945292945646334458739014580232488447"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361"
}
]