Deadlock Vulnerability in drivers: staging: rtl8723bs
Summary
GSD-2022-1003220: drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback(). Affects Kernel versions < f89f6c3ebf69623b8ea48200bd690e9e210335a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The drivers: staging: rtl8723bs package is a component of the Linux Kernel, which is responsible for managing the Realtek RTL8723BS wireless chipset. This package provides the necessary drivers for the chipset to function properly. The vulnerability identified in this package is related to a deadlock issue in the rtw_surveydone_event_callback() function.
Vulnerability Detail
The vulnerability in drivers: staging: rtl8723bs is a deadlock issue that occurs in the rtw_surveydone_event_callback() function. This function is responsible for handling survey done events in the wireless chipset. Due to a flaw in the implementation, a deadlock can occur, leading to a system freeze or unresponsiveness. An attacker with local access to the system could potentially exploit this vulnerability to cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The drivers: staging: rtl8723bs package in the Linux Kernel is vulnerable to a deadlock issue in the rtw_surveydone_event_callback() function. This vulnerability can potentially lead to a system freeze or unresponsiveness. It is recommended to update the Linux Kernel to version v5.15.47 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is a potential system freeze or unresponsiveness, leading to a denial-of-service (DoS) condition.
Users of the Linux Kernel with the drivers: staging: rtl8723bs package installed are affected by this vulnerability.
No, remote exploitation of this vulnerability is not possible as it requires local access to the system.
There is no information available regarding exploitation of this vulnerability in the wild.
The only known mitigation for this vulnerability is to update the Linux Kernel to version v5.15.47 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
