In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Lock wiphy in cfg80211_get_station
Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()).
This fixes the following kernel NULL dereference:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000000003001000 [0000000000000050] pgd=0800000002dca003, p4d=0800000002dca003, pud=08000000028e9003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] SMP Modules linked in: netconsole dwc3_meson_g12a dwc3_of_simple dwc3 ip_gre gre ath10k_pci ath10k_core ath9k ath9k_common ath9k_hw ath CPU: 0 PID: 1091 Comm: kworker/u8:0 Not tainted 6.4.0-02144-g565f9a3a7911-dirty #705 Hardware name: RPT (r1) (DT) Workqueue: bat_events batadv_v_elp_throughput_metric_update pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ath10k_sta_statistics+0x10/0x2dc [ath10k_core] lr : sta_set_sinfo+0xcc/0xbd4 sp : ffff000007b43ad0 x29: ffff000007b43ad0 x28: ffff0000071fa900 x27: ffff00000294ca98 x26: ffff000006830880 x25: ffff000006830880 x24: ffff00000294c000 x23: 0000000000000001 x22: ffff000007b43c90 x21: ffff800008898acc x20: ffff00000294c6e8 x19: ffff000007b43c90 x18: 0000000000000000 x17: 445946354d552d78 x16: 62661f7200000000 x15: 57464f445946354d x14: 0000000000000000 x13: 00000000000000e3 x12: d5f0acbcebea978e x11: 00000000000000e3 x10: 000000010048fe41 x9 : 0000000000000000 x8 : ffff000007b43d90 x7 : 000000007a1e2125 x6 : 0000000000000000 x5 : ffff0000024e0900 x4 : ffff800000a0250c x3 : ffff000007b43c90 x2 : ffff00000294ca98 x1 : ffff000006831920 x0 : 0000000000000000 Call trace: ath10k_sta_statistics+0x10/0x2dc [ath10k_core] sta_set_sinfo+0xcc/0xbd4 ieee80211_get_station+0x2c/0x44 cfg80211_get_station+0x80/0x154 batadv_v_elp_get_throughput+0x138/0x1fc batadv_v_elp_throughput_metric_update+0x1c/0xa4 process_one_work+0x1ec/0x414 worker_thread+0x70/0x46c kthread+0xdc/0xe0 ret_from_fork+0x10/0x20 Code: a9bb7bfd 910003fd a90153f3 f9411c40 (f9402814)
This happens because STA has time to disconnect and reconnect before batadv_v_elp_throughput_metric_update() delayed work gets scheduled. In this situation, ath10k_sta_state() can be in the middle of resetting arsta data when the work queue get chance to be scheduled and ends up accessing it. Locking wiphy prevents that.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade perfUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-64k-coreUpgrade rvUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-cross-headers | Sep 26, 2024 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-64kb-optional | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-bluefieldUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-raspiUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-gke-5.15 | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub