In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix dfs radar event locking
The ath11k active pdevs are protected by RCU but the DFS radar event handling code calling ath11kmacgetarbypdevid() was not marked as a read-side critical section.
Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.
Compile tested only.
{ "vanir_signatures": [ { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f882f51905517575c9f793a3dff567af90ef9a10", "deprecated": false, "id": "CVE-2023-52798-007036eb", "signature_type": "Function", "digest": { "length": 1293.0, "function_hash": "77979997462016794872292731243737115970" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21ebb0aba580d347e12f01ce5f6e75044427b3d5", "deprecated": false, "id": "CVE-2023-52798-69ed6017", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f882f51905517575c9f793a3dff567af90ef9a10", "deprecated": false, "id": "CVE-2023-52798-7089652b", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca420ac4f9451f22347bae44b18ab47ba2c267ec", "deprecated": false, "id": "CVE-2023-52798-7c3984ce", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd878e1750190a612b5de2af357cca422ec0822", "deprecated": false, "id": "CVE-2023-52798-83b9b96a", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b6c14833165f689cc5928574ebafe52bbce5f1e", "deprecated": false, "id": "CVE-2023-52798-859b20ba", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@21ebb0aba580d347e12f01ce5f6e75044427b3d5", "deprecated": false, "id": "CVE-2023-52798-8ad56752", "signature_type": "Function", "digest": { "length": 1299.0, "function_hash": "258314282705421634440942568648957361393" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426e718ce9ba60013364a54233feee309356cb82", "deprecated": false, "id": "CVE-2023-52798-95ce951b", "signature_type": "Function", "digest": { "length": 1293.0, "function_hash": "77979997462016794872292731243737115970" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b6c14833165f689cc5928574ebafe52bbce5f1e", "deprecated": false, "id": "CVE-2023-52798-b1f07fbe", "signature_type": "Function", "digest": { "length": 1299.0, "function_hash": "258314282705421634440942568648957361393" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@426e718ce9ba60013364a54233feee309356cb82", "deprecated": false, "id": "CVE-2023-52798-b4c6bfb2", "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "83801019806810213707691080078266784900", "48718150938880393405144523829932877564", "339564595298927637839933843250567393856", "147167160744407475901207942316012921800", "252870869309040293906400817564233783891", "157892592474693948655302639961017002062", "92042057130272095780102752465710673192" ] }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1fd878e1750190a612b5de2af357cca422ec0822", "deprecated": false, "id": "CVE-2023-52798-b5084893", "signature_type": "Function", "digest": { "length": 1299.0, "function_hash": "258314282705421634440942568648957361393" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca420ac4f9451f22347bae44b18ab47ba2c267ec", "deprecated": false, "id": "CVE-2023-52798-ca7c551c", "signature_type": "Function", "digest": { "length": 1293.0, "function_hash": "77979997462016794872292731243737115970" }, "target": { "file": "drivers/net/wireless/ath/ath11k/wmi.c", "function": "ath11k_wmi_pdev_dfs_radar_detected_event" } } ] }