Deadlock in rtw_joinbss_event_prehandle() in drivers: staging: rtl8192bs
Summary
GSD-2022-1003218: drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle(). Affects Kernel versions < ae60744d5fad840b9d056d35b4b652d95e755846. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drivers: staging: rtl8192bs package is a component of the Linux Kernel. It provides support for the Realtek RTL8192BS wireless chipset. This package is responsible for managing the communication between the operating system and the wireless hardware. The vulnerability in question affects the rtw_joinbss_event_prehandle() function within the package.
Vulnerability Detail
The vulnerability in rtw_joinbss_event_prehandle() function can lead to a deadlock situation. A deadlock occurs when two or more threads are blocked indefinitely, waiting for each other to release resources. In this case, the function is not properly handling the event of joining a basic service set (BSS), which can result in a deadlock. An attacker could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition or disrupt the normal operation of the wireless functionality.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
In conclusion, the drivers: staging: rtl8192bs package in the Linux Kernel is vulnerable to a deadlock issue in the rtw_joinbss_event_prehandle() function. This vulnerability can potentially lead to a denial-of-service condition or disruption of wireless functionality. It is recommended to update the Linux Kernel to version v5.15.47 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially lead to a deadlock situation, causing a denial-of-service (DoS) condition or disruption of wireless functionality.
At the time of this report, there is no known exploit for this vulnerability.
No, the vulnerability is fixed in Linux Kernel version v5.15.47 and later.
No, the recommended fix is to update the Linux Kernel to the patched version.
More details about the fix can be found in the commit ae60744d5fad840b9d056d35b4b652d95e755846 in the official Linux Kernel repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
