CVE-2023-52800

low-risk
Published 2024-05-21

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix htt pktlog locking The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section. Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues. Compile tested only.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
4
CVSS 4.4/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (12)

Patch https://git.kernel.org/stable/c/03ed26935bebf6b6fd8a656490bf3dcc71b72679
Patch https://git.kernel.org/stable/c/3a51e6b4da71fdfa43ec006d6abc020f3e22d14e
Patch https://git.kernel.org/stable/c/3f77c7d605b29df277d77e9ee75d96e7ad145d2d
Patch https://git.kernel.org/stable/c/423762f021825b5e57c3d6f01ff96a9ff19cdcd8
Patch https://git.kernel.org/stable/c/69cede2a5a5f60e3f5602b901b52cb64edd2ea6c
Patch https://git.kernel.org/stable/c/e3199b3fac65c9f103055390b6fd07c5cffa5961
Patch https://git.kernel.org/stable/c/03ed26935bebf6b6fd8a656490bf3dcc71b72679
Patch https://git.kernel.org/stable/c/3a51e6b4da71fdfa43ec006d6abc020f3e22d14e
Patch https://git.kernel.org/stable/c/3f77c7d605b29df277d77e9ee75d96e7ad145d2d
Patch https://git.kernel.org/stable/c/423762f021825b5e57c3d6f01ff96a9ff19cdcd8
Patch https://git.kernel.org/stable/c/69cede2a5a5f60e3f5602b901b52cb64edd2ea6c
Patch https://git.kernel.org/stable/c/e3199b3fac65c9f103055390b6fd07c5cffa5961
20
/ 100
low-risk
Severity 15/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal