In the Linux kernel, the following vulnerability has been resolved:
wifi: wilc1000: fix RCU usage in connect path
With lockdep enabled, calls to the connect function from cfg802.11 layer lead to the following warning:
============================= WARNING: suspicious RCU usage 6.7.0-rc1-wt+ #333 Not tainted ----------------------------- drivers/net/wireless/microchip/wilc1000/hif.c:386 suspicious rcu_dereference_check() usage! [...] stack backtrace: CPU: 0 PID: 100 Comm: wpa_supplicant Not tainted 6.7.0-rc1-wt+ #333 Hardware name: Atmel SAMA5 unwind_backtrace from show_stack+0x18/0x1c show_stack from dump_stack_lvl+0x34/0x48 dump_stack_lvl from wilc_parse_join_bss_param+0x7dc/0x7f4 wilc_parse_join_bss_param from connect+0x2c4/0x648 connect from cfg80211_connect+0x30c/0xb74 cfg80211_connect from nl80211_connect+0x860/0xa94 nl80211_connect from genl_rcv_msg+0x3fc/0x59c genl_rcv_msg from netlink_rcv_skb+0xd0/0x1f8 netlink_rcv_skb from genl_rcv+0x2c/0x3c genl_rcv from netlink_unicast+0x3b0/0x550 netlink_unicast from netlink_sendmsg+0x368/0x688 netlink_sendmsg from ____sys_sendmsg+0x190/0x430 ____sys_sendmsg from ___sys_sendmsg+0x110/0x158 ___sys_sendmsg from sys_sendmsg+0xe8/0x150 sys_sendmsg from ret_fast_syscall+0x0/0x1c
This warning is emitted because in the connect path, when trying to parse target BSS parameters, we dereference a RCU pointer whithout being in RCU critical section. Fix RCU dereference usage by moving it to a RCU read critical section. To avoid wrapping the whole wilc_parse_join_bss_param under the critical section, just use the critical section to copy ies data
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rtUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-source | Jun 13, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-azureUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub