Deadlock in rtllib_beacons_stop() in drivers: staging: rtl8192e
Summary
GSD-2022-1003680: drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop(). Affects Kernel versions < 64b05fa212c7e4d057676e8b7e7120c6eb2f615b. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The affected package is the Linux Kernel, specifically the drivers/staging/rtl8192e module. This module provides support for Realtek RTL8192E wireless LAN devices. It is part of the staging area in the Linux Kernel, which means it is still under development and may contain experimental code. The rtl8192e module is responsible for managing wireless communication on these devices.
Vulnerability Detail
The vulnerability identified in the rtl8192e module is a deadlock in the rtllib_beacons_stop() function. This function is called when stopping beacon transmission on the wireless LAN device. The deadlock occurs when multiple threads try to stop beacon transmission simultaneously, leading to a situation where none of the threads can proceed. This can result in a system freeze or unresponsive behavior. The vulnerability has been fixed in Linux Kernel version v5.4.198 by commit 64b05fa212c7e4d057676e8b7e7120c6eb2f615b.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the drivers/staging/rtl8192e module in the Linux Kernel is vulnerable to a deadlock in the rtllib_beacons_stop() function. This vulnerability can result in a system freeze or unresponsive behavior. It is recommended to update the Linux Kernel to version v5.4.198 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system freeze or unresponsive behavior when stopping beacon transmission on Realtek RTL8192E wireless LAN devices.
There is no known exploit for this vulnerability at the moment.
No, this vulnerability requires local access to the affected system.
The recommended mitigation is to update the Linux Kernel to the fixed version.
For more details about this vulnerability, refer to the source link provided in the database_specific section of this report.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
