Skip to content
Heist/ feed
Unrated

wifi: rtlwifi: remove unused check_buddy_priv

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: remove unused check_buddy_priv Commit 2461c7d60f9f ("rtlwifi: Update header file") introduced a global list of private data structures. Later on, commit 26634c4b1868 ("rtlwifi Modify existing bits to match vendor version 2013.02.07") started adding the private data to that list at probe time and added a hook, check_buddy_priv to find the private data from a similar device. However, that function was never used. Besides, though there is a lock for that list, it is never used. And when the probe fails, the private data is never removed from the list. This would cause a second probe to access freed memory. Remove the unused hook, structures and members, which will prevent the potential race condition on the list and its corruption during a second probe when probe fails.

Announced Group revision 1
Original source ↗

CVE-2024-58072

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-58072

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "f801e754efa21bd61b3cc15ec7565696165b272f",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "1b9cbd8a9ae68b32099fbb03b2d5ffa0c5e0dcc9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "8e2fcc68fbaab3ad9f5671fee2be0956134b740a",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "1e39b0486cdb496cdfba3bc89886150e46acf6f4",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "465d01ef6962b82b1f0ad1f3e58b398dbd35c1c1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "543e3e9f2e9e47ded774c74e680f28a0ca362aee",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "006e803af7408c3fc815b0654fc5ab43d34f0154",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "26634c4b1868323f49f8cd24c3493b57819867fd",
        "lessThan": "2fdac64c3c35858aa8ac5caa70b232e03456e120",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/realtek/rtlwifi/base.c",
      "drivers/net/wireless/realtek/rtlwifi/base.h",
      "drivers/net/wireless/realtek/rtlwifi/pci.c",
      "drivers/net/wireless/realtek/rtlwifi/wifi.h"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.10"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.10",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.4.291",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.235",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.179",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.129",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.76",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.13",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.13.2",
        "versionType": "semver",
        "lessThanOrEqual": "6.13.*"
      },
      {
        "status": "unaffected",
        "version": "6.14",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/wireless/realtek/rtlwifi/base.c",
      "drivers/net/wireless/realtek/rtlwifi/base.h",
      "drivers/net/wireless/realtek/rtlwifi/pci.c",
      "drivers/net/wireless/realtek/rtlwifi/wifi.h"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2024-58072

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#26876 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Revision history

  1. CVE-2024-58072 · Revision 1Source updated