In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_completion()', always wait for both (regular and wowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()' has failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue 'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually the wowlan one) is still in progress, causing UAF detected by KASAN.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | < 20.1R2 |
| Linux | Linux | Versions earlier than Leland-AL00A 9.1.0.111(C00E111R2P10T8) |
| Linux | Linux | 7.5.0.1 |
| Linux | Linux | 7.1.0.2 |