In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: Lock wiphy in cfg80211_get_station
Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()).
This fixes the following kernel NULL dereference:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000000003001000 [0000000000000050] pgd=0800000002dca003, p4d=0800000002dca003, pud=08000000028e9003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] SMP Modules linked in: netconsole dwc3_meson_g12a dwc3_of_simple dwc3 ip_gre gre ath10k_pci ath10k_core ath9k ath9k_common ath9k_hw ath CPU: 0 PID: 1091 Comm: kworker/u8:0 Not tainted 6.4.0-02144-g565f9a3a7911-dirty #705 Hardware name: RPT (r1) (DT) Workqueue: bat_events batadv_v_elp_throughput_metric_update pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ath10k_sta_statistics+0x10/0x2dc [ath10k_core] lr : sta_set_sinfo+0xcc/0xbd4 sp : ffff000007b43ad0 x29: ffff000007b43ad0 x28: ffff0000071fa900 x27: ffff00000294ca98 x26: ffff000006830880 x25: ffff000006830880 x24: ffff00000294c000 x23: 0000000000000001 x22: ffff000007b43c90 x21: ffff800008898acc x20: ffff00000294c6e8 x19: ffff000007b43c90 x18: 0000000000000000 x17: 445946354d552d78 x16: 62661f7200000000 x15: 57464f445946354d x14: 0000000000000000 x13: 00000000000000e3 x12: d5f0acbcebea978e x11: 00000000000000e3 x10: 000000010048fe41 x9 : 0000000000000000 x8 : ffff000007b43d90 x7 : 000000007a1e2125 x6 : 0000000000000000 x5 : ffff0000024e0900 x4 : ffff800000a0250c x3 : ffff000007b43c90 x2 : ffff00000294ca98 x1 : ffff000006831920 x0 : 0000000000000000 Call trace: ath10k_sta_statistics+0x10/0x2dc [ath10k_core] sta_set_sinfo+0xcc/0xbd4 ieee80211_get_station+0x2c/0x44 cfg80211_get_station+0x80/0x154 batadv_v_elp_get_throughput+0x138/0x1fc batadv_v_elp_throughput_metric_update+0x1c/0xa4 process_one_work+0x1ec/0x414 worker_thread+0x70/0x46c kthread+0xdc/0xe0 ret_from_fork+0x10/0x20 Code: a9bb7bfd 910003fd a90153f3 f9411c40 (f9402814)
This happens because STA has time to disconnect and reconnect before batadv_v_elp_throughput_metric_update() delayed work gets scheduled. In this situation, ath10k_sta_state() can be in the middle of resetting arsta data when the work queue get chance to be scheduled and ends up accessing it. Locking wiphy prevents that.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade libperfUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf | Sep 26, 2024 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 18, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade bpftool | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdso | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1186-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.4.0-1141-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1140-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-ibmUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-oemUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-208-genericUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-44-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub