CVE-2024-27052

wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

HIGH

7.8

CVSS Score

Published: May 1, 2024 at 12:54 PM UTC

Updated: October 15, 2026 at 01:17 AM UTC

3 products affected across 3 vendorsLinux KernelDebian LinuxSIMATIC S7-1500 TM MFP

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work The workqueue might still be running, when the driver is stopped. To avoid a use-after-free, call cancel_work_sync() in rtl8xxxu_stop().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

10.0

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.1535.16 ≤ v < 6.1.835.5 ≤ v < 5.10.2146.2 ≤ v < 6.6.236.7 ≤ v < 6.7.116.8 ≤ v < 6.8.25.5e542e66b7c2ee542e66b7c2ee2adeefdbb7f259f2f60cadf2819

Vendor states this is fixed in 1213acb478a7181cd73eeaf00db430f1e45b1361 (fixed)

Vendor states this is fixed in 156012667b85ca7305cb363790d3ae8519a6f41e (fixed)

Vendor states this is fixed in 3518cea837de4d106efa84ddac18a07b6de1384e (fixed)

Vendor states this is fixed in 58fe3bbddfec (fixed)

Vendor states this is fixed in 58fe3bbddfec10c6b216096d8c0e517cd8463e3a (fixed)

Vendor states this is fixed in 7059cdb69f8e1a2707dd1e2f363348b507ed7707 (fixed)

Vendor states this is fixed in ac512507ac89c01ed6cd4ca53032f52cdb23ea59 (fixed)

Vendor states this is fixed in dddedfa3b29a63c2ca4336663806a6128b8545b4 (fixed)

Vendor states this is fixed in 5.10.214 (unaffected)

Vendor states this is fixed in 5.15.153 (unaffected)

Vendor states this is fixed in 5.5 (unaffected)

Vendor states this is fixed in 6.1.83 (unaffected)