CVE-2023-53532

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath11k: fix deinitialization of firmware resources

Currently, in ath11k_ahb_fw_resources_init(), iommu domain

mapping is done only for the chipsets having fixed firmware

memory. Also, for such chipsets, mapping is done only if it

does not have TrustZone support.

During deinitialization, only if TrustZone support is not there,

iommu is unmapped back. However, for non fixed firmware memory

chipsets, TrustZone support is not there and this makes the

condition check to true and it tries to unmap the memory which

was not mapped during initialization.

This leads to the following trace -

[ 83.198790] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008

[ 83.259537] Modules linked in: ath11k_ahb ath11k qmi_helpers

.. snip ..

[ 83.280286] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)

[ 83.287228] pc : __iommu_unmap+0x30/0x140

[ 83.293907] lr : iommu_unmap+0x

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References