In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: fix RCU usage in connect path
With lockdep enabled, calls to the connect function from cfg802.11 layer lead to the following warning:
============================= WARNING: suspicious RCU usage 6.7.0-rc1-wt+ #333 Not tainted ----------------------------- drivers/net/wireless/microchip/wilc1000/hif.c:386 suspicious rcu_dereference_check() usage! [...] stack backtrace: CPU: 0 PID: 100 Comm: wpa_supplicant Not tainted 6.7.0-rc1-wt+ #333 Hardware name: Atmel SAMA5 unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x34/0x48 dump_stack_lvl from wilc_parse_join_bss_param+0x7dc/0x7f4 wilc_parse_join_bss_param from connect+0x2c4/0x648 connect from cfg80211_connect+0x30c/0xb74 cfg80211_connect from nl80211_connect+0x860/0xa94 nl80211_connect from genl_rcv_msg+0x3fc/0x59c genl_rcv_msg from netlink_rcv_skb+0xd0/0x1f8 netlink_rcv_skb from genl_rcv+0x2c/0x3c genl_rcv from netlink_unicast+0x3b0/0x550 netlink_unicast from netlink_sendmsg+0x368/0x688 netlink_sendmsg from ____sys_sendmsg+0x190/0x430 ____sys_sendmsg from ___sys_sendmsg+0x110/0x158 ___sys_sendmsg from sys_sendmsg+0xe8/0x150 sys_sendmsg from ret_fast_syscall+0x0/0x1c
This warning is emitted because in the connect path, when trying to parse target BSS parameters, we dereference a RCU pointer whithout being in RCU critical section. Fix RCU dereference usage by moving it to a RCU read critical section. To avoid wrapping the whole wilc_parse_join_bss_param under the critical section, just use the critical section to copy ies data
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-altera | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-gke-5.15Upgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub