Fix RCU Usage in rtw89_core_txq_push() Vulnerability in Kernel
Summary
GSD-2022-1001062: rtw89: fix RCU usage in rtw89_core_txq_push(). Affects Kernel versions < 30713cffc9a3e36799049019a2209ce5ea9f458a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that manages the system's resources and facilitates communication between hardware and software. It provides essential functions and services for the proper functioning of the system. The rtw89_core_txq_push() function is a part of the Kernel's Realtek Wi-Fi driver (rtw89) and is responsible for pushing packets to the transmission queue. However, this function has a vulnerability related to RCU (Read-Copy-Update) usage.
Vulnerability Detail
The vulnerability in rtw89_core_txq_push() arises from incorrect RCU usage. RCU is a synchronization mechanism used in the Linux Kernel to allow efficient read-side access to shared data structures. In this case, the RCU usage in rtw89_core_txq_push() is flawed, potentially leading to race conditions and memory corruption. An attacker could exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial-of-service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the affected Wi-Fi driver (rtw89) if it is not essential for their system's operation. This can be done by blacklisting the rtw89 module or removing it from the Kernel configuration. However, this workaround may result in the loss of Wi-Fi functionality until the vulnerability is properly fixed.
Conclusion
The rtw89_core_txq_push() vulnerability in the Kernel's Realtek Wi-Fi driver (rtw89) has been identified and fixed in Linux Kernel version v5.17.3. It is crucial to update the Kernel to the fixed version or apply the provided workaround to mitigate the risk of exploitation. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could range from arbitrary code execution and privilege escalation to denial-of-service (DoS) conditions.
An attacker could exploit this vulnerability by triggering race conditions and memory corruption in the rtw89_core_txq_push() function, potentially leading to the execution of arbitrary code or privilege escalation.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, it is recommended to update the Kernel to version v5.17.3 or later, which includes the necessary fix for the flawed RCU usage in rtw89_core_txq_push().
Yes, as a temporary workaround, users can disable the rtw89 Wi-Fi driver if it is not essential for their system's operation. However, this may result in the loss of Wi-Fi functionality until the vulnerability is properly fixed.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
