CVE-2023-52800

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix htt pktlog locking

The ath11k active pdevs are protected by RCU but the htt pktlog handling code calling ath11k_mac_get_ar_by_pdev_id() was not marked as a read-side critical section.

Mark the code in question as an RCU read-side critical section to avoid any potential use-after-free issues.

Compile tested only.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
LinuxLinux>= d5c65159f2895379e11ca13f62feabe93278985d, < 03ed26935bebf6b6fd8a656490bf3dcc71b72679; >= d5c65159f2895379e11ca13f62feabe93278985d, < 3a51e6b4da71fdfa43ec006d6abc020f3e22d14e; >= d5c65159f2895379e11ca13f62feabe93278985d, < e3199b3fac65c9f103055390b6fd07c5cffa5961; >= d5c65159f2895379e11ca13f62feabe93278985d, < 423762f021825b5e57c3d6f01ff96a9ff19cdcd8; >= d5c65159f2895379e11ca13f62feabe93278985d, < 69cede2a5a5f60e3f5602b901b52cb64edd2ea6c; >= d5c65159f2895379e11ca13f62feabe93278985d, < 3f77c7d605b29df277d77e9ee75d96e7ad145d2d
LinuxLinux5.6

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-528018.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area CVE-2023-528035.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix RPC client cleaned up the freed pipefs dentries RPC clientCVE-2023-528047.8In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for db_maxag and db_agpref Both db_maxag anCVE-2023-528057.8In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not cCVE-2023-528065.5In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While ACVE-2023-528077.8In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is reaCVE-2023-528085.5In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs CVE-2023-528095.5In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setCVE-2023-52819.8A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part ofCVE-2023-528107.8In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(numbCVE-2023-528115.5In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In pracCVE-2023-528127.8In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV env
CVE-2023-52800: Medium severity, CVSS 4.4 | Vulnix