Bug 2363740 (CVE-2023-53086)
| Summary: | CVE-2023-53086 kernel: wifi: mt76: connac: do not check WED status for non-mmio devices | ||
|---|---|---|---|
| Product: | [Other] Security Response | Reporter: | OSIDB Bzimport <bzimport> |
| Component: | vulnerability | Assignee: | Product Security DevOps Team <prodsec-dev> |
| Status: | NEW --- | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | unspecified | CC: | dfreiber, drow, jburrell, rhel-process-autobot, vkumar, watson-tool-maintainers |
| Target Milestone: | --- | Keywords: | Security |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | --- | |
| Doc Text: |
A flaw was found in the Linux kernel's MediaTek mt76 wireless driver. This flaw allows a local user to trigger a Denial of Service (DoS) by causing a kernel crash. The issue occurs because the driver improperly checks Wireless Ethernet Dispatch (WED) status on devices that do not support memory-mapped input/output (MMIO), such as USB or SDIO wireless adapters. Performing wireless operations, such as key configuration or network association, on these devices leads to an invalid memory access that halts the operating system.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | Type: | --- | |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
OSIDB Bzimport
2025-05-02 16:03:53 UTC
|