Linux Kernel Deadlock Vulnerability in RTL8192EU Driver

Vulnerability

A deadlock vulnerability has been identified in the Linux kernel within the RTL8192EU driver. The issue arises in the 'rtw_joinbss_event_prehandle()' function, where a timer is set while holding a lock. This creates a situation where the timer handler also requires the same lock, leading to a permanent blockage. The vulnerability has been addressed by modifying the function to allow the timer handler to access the necessary lock, thus preventing the deadlock.

Impact

Exploitation of this vulnerability leads to a deadlock condition, causing the 'rtw_joinbss_event_prehandle()' function to block indefinitely.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.