Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A deadlock vulnerability has been identified in the Linux kernel's handling of IEEE 802.11 beacons, specifically within the RTL8192U staging driver. The issue arises in the 'ieee80211_beacons_stop()' function, where a circular wait condition occurs between two threads. Thread 1 holds a lock while waiting for a timer to stop, and Thread 2 requires the same lock to release the timer, leading to a permanent block. The vulnerability has been addressed by modifying the function to allow the timer to be released without holding the lock, thereby preventing the deadlock.
Exploitation of this vulnerability leads to a deadlock condition, causing the 'ieee80211_beacons_stop()' function to block indefinitely.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.