In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8xxxu: add cancelworksync() for c2hcmd_work
The workqueue might still be running, when the driver is stopped. To avoid a use-after-free, call cancelworksync() in rtl8xxxu_stop().
[
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-1bf830c3"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-2c55454a"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-37ece57e"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-464f3825"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-4afb8d6e"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7059cdb69f8e1a2707dd1e2f363348b507ed7707",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-56752e1c"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-84dd8bd2"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@156012667b85ca7305cb363790d3ae8519a6f41e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-87bab476"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"219132190210826883911124655100955877653",
"305584256760298423665159219108664258703",
"316977032147768306269290855378721317672"
]
},
"target": {
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-c543da7c"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dddedfa3b29a63c2ca4336663806a6128b8545b4",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-c73b8624"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3518cea837de4d106efa84ddac18a07b6de1384e",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-df2f5025"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@58fe3bbddfec10c6b216096d8c0e517cd8463e3a",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-edb75e1f"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ac512507ac89c01ed6cd4ca53032f52cdb23ea59",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-fb924c4e"
},
{
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1213acb478a7181cd73eeaf00db430f1e45b1361",
"signature_type": "Function",
"digest": {
"function_hash": "18945292945646334458739014580232488447",
"length": 679.0
},
"target": {
"function": "rtl8xxxu_stop",
"file": "drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c"
},
"id": "CVE-2024-27052-fdb1f607"
}
]