CVE-2023-54025
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw->wiphy->wowlan_config will be NULL.…
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw->wiphy->wowlan_config will be NULL. rsi_config_wowlan() checks whether wowlan_config is non-NULL and if it is not, then WARNs about it. The warning is valid, as during normal operation the rsi_config_wowlan() should only ever be called with non-NULL wowlan_config. In shutdown this rsi_config_wowlan() should only ever be called if WoWlan was configured before by the user. Add checks for non-NULL wowlan_config into the shutdown hook. While at it, check whether the wiphy is also non-NULL before accessing wowlan_config . Drop the single-use wowlan_config variable, just inline it into function call.
- CVSS
- Not yet scored
- EPSS
- 0.20% probability · 9th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/1b51236aa49a0564280bd45c94118cab6d9b0fbd
- https://git.kernel.org/stable/c/4391fa180856ff84a2cef4a92694a689eebb855e
- https://git.kernel.org/stable/c/b241e260820b68c09586e8a0ae0fc23c0e3215bd
- https://git.kernel.org/stable/c/b2aeb97fd470206e67f7b3b4a3e68212a13f747b
- https://git.kernel.org/stable/c/b601468539c1d97539097bfc87ad11f1704b7eb7
- https://git.kernel.org/stable/c/eb205a06908122f50b1dd1baa43f7c8036bfc7dc
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.