CVE-2023-53281

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()

Commit 041879b12ddb ("drivers: staging: rtl8192bs: Fix deadlock in

rtw_joinbss_event_prehandle()") besides fixing the deadlock also

modified _rtw_join_timeout_handler() to use spin_[un]lock_irq()

instead of spin_[un]lock_bh().

_rtw_join_timeout_handler() calls rtw_do_join() which takes

pmlmepriv->scanned_queue.lock using spin_[un]lock_bh(). This

spin_unlock_bh() call re-enables softirqs which triggers an oops in

kernel/softirq.c: __local_bh_enable_ip() when it calls

lockdep_assert_irqs_enabled():

[ 244.506087] WARNING: CPU: 2 PID: 0 at kernel/softirq.c:376 __local_bh_enable_ip+0xa6/0x100

...

[ 244.509022] Call Trace:

[ 244.509048] <IRQ>

[ 244.509100] _rtw_join_timeout_handler+0x134/0x170 [r8723bs]

[ 244.509468] ? __pfx__rtw_join_timeout_handler+0x10/0x10 [r8723bs]

[ 244.509772] ? __pfx__rtw_join_timeout_handler+0x10/0x10 [r8723bs]

[

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References