CVE-2023-53822: wifi: ath11k: Ignore frags from uninitialized peer in dp.
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: Ignore frags from uninitialized peer in dp.
When max virtual ap interfaces are configured in all the bands with ACS and hostapd restart is done every 60s, a crash is observed at random times. In this certain scenario, a fragmented packet is received for self peer, for which rxtid and rxfrags are not initialized in datapath. While handling this fragment, crash is observed as the rxfrag list is uninitialised and when we walk in ath11kdprxhsortfrags, skb null leads to exception.
To address this, before processing received fragments we check dpsetupdone flag is set to ensure that peer has completed its dp peer setup for fragment queue, else ignore processing the fragments.
Call trace: ath11kdpprocessrxerr+0x550/0x1084 [ath11k] ath11kdpservicesrng+0x70/0x370 [ath11k] 0xffffffc009693a04 napipoll+0x30/0xa4 netrxaction+0x118/0x270 dosoftirq+0x10c/0x244 irqexit+0x64/0xb4 handledomainirq+0x88/0xac gichandleirq+0x74/0xbc el1irq+0xf0/0x1c0 archcpuidle+0x10/0x18 doidle+0x104/0x248 cpustartupentry+0x20/0x64 restinit+0xd0/0xdc archcallrestinit+0xc/0x14 startkernel+0x480/0x4b8 Code: f9400281 f94066a2 91405021 b94a0023 (f9406401)
Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01744-QCAHKSWPLSILICONZ-1
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53822?
CVE-2023-53822 has been classified as a moderate severity vulnerability.
What systems are affected by CVE-2023-53822?
CVE-2023-53822 affects the Linux kernel, specifically impacting configurations with max virtual AP interfaces.
How do I fix CVE-2023-53822?
To fix CVE-2023-53822, updating to a patched version of the Linux kernel is recommended.
What kind of impact does CVE-2023-53822 have on systems?
CVE-2023-53822 can cause system crashes when hostapd is restarted frequently.
Is there a workaround for CVE-2023-53822?
Currently, no specific workaround for CVE-2023-53822 has been documented besides applying the available kernel updates.