PT-2025-40159 · Rtw89+2 · Rtw89+2
Published
2023-04-03
·
Updated
2026-04-20
·
CVE-2023-53452
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.2.7
Description
A race condition can occur in the wifi subsystem related to the rtw89 driver, specifically between the initialization and enabling of Network Address Translation (NAPI). This condition arises if the network device is registered before NAPI is initialized, and user space attempts to start the device, which then enables NAPI. This can lead to a kernel bug, indicated by an invalid opcode error. The issue is addressed by reordering functions and moving network device registration to be the final step in the PCI probe process, along with correcting error handling in
rtw89 core register hw().Recommendations
Update the Linux kernel to version 6.2.7 or later.
Exploit
Fix
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse
Rtw89