High · 7.8 CVE-2024-27052 EUVD-2024-24314GHSA-29w5-279f-vr72

wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

Published May 1, 2024 · Updated Oct 15, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-nvidia Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work

The workqueue might still be running, when the driver is stopped. To
avoid a use-after-free, call cancel_work_sync() in rtl8xxxu_stop().

Affected products

Vendor	Product	Affected	Fixed
Linux	Linux	5.5	5.10.214

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	6.7.12-1	—
Debian 13	linux	6.7.12-1	—
Debian 12	linux	6.1.85-1	—
Debian 11	linux	5.10.216-1	DSA-5681-1
Debian 10	linux-5.10	5.10.216-1~deb10u1	DLA-3842-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Nvidia-BlueField 22.04 LTS	linux-bluefield	5.15.0-1044.46	—
Ubuntu 24.04 LTS	linux	6.8.0-35.35	USN-6816-1
Ubuntu 24.04 LTS	linux-aws	6.8.0-1009.9	USN-6817-1
Ubuntu 24.04 LTS	linux-azure	6.8.0-1008.8	USN-6817-3
Ubuntu 24.04 LTS	linux-gcp	6.8.0-1008.9	USN-6817-1
Ubuntu 24.04 LTS	linux-gke	6.8.0-1004.7	USN-6817-3
Ubuntu 24.04 LTS	linux-ibm +2	6.8.0-1006.6	USN-6878-1, USN-6817-2, USN-6816-1
Ubuntu 24.04 LTS	linux-raspi	6.8.0-1005.5	USN-6816-1
Ubuntu 24.04 LTS	linux-riscv +1	6.8.0-35.35.1	USN-6816-1
Ubuntu 22.04 LTS	linux	5.15.0-112.122	USN-6820-1
Ubuntu 22.04 LTS	linux-aws	5.15.0-1063.69	USN-6821-3
Ubuntu 22.04 LTS	linux-azure	5.15.0-1066.75	USN-6821-4
Ubuntu 22.04 LTS	linux-azure-fde	5.15.0-1067.76.1	USN-6821-4
Ubuntu 22.04 LTS	linux-gcp	5.15.0-1062.70	USN-6820-1
Ubuntu 22.04 LTS	linux-gke	5.15.0-1060.66	USN-6821-1
Ubuntu 22.04 LTS	linux-gkeop	5.15.0-1046.53	USN-6821-2
Ubuntu 22.04 LTS	linux-ibm	5.15.0-1056.59	USN-6821-1
Ubuntu 22.04 LTS	linux-intel-iotg	5.15.0-1058.64	USN-6821-1
Ubuntu 22.04 LTS	linux-kvm	5.15.0-1060.65	USN-6821-2
Ubuntu 22.04 LTS	linux-lowlatency	5.15.0-110.120	USN-6820-1
Ubuntu 22.04 LTS	linux-nvidia	5.15.0-1058.59	USN-6820-2
Ubuntu 22.04 LTS	linux-nvidia-tegra	5.15.0-1026.26	—
Ubuntu 22.04 LTS	linux-nvidia-tegra-igx	5.15.0-1015.15	—
Ubuntu 22.04 LTS	linux-oracle	5.15.0-1061.67	USN-6821-1
Ubuntu 22.04 LTS	linux-raspi	5.15.0-1058.61	USN-6919-1
Ubuntu 22.04 LTS	linux-riscv +31	No fix yet	—
Ubuntu 22.04 LTS	linux-xilinx-zynqmp	5.15.0-1030.34	USN-6820-1
Ubuntu 20.04 LTS	linux-aws-5.15	5.15.0-1063.69~20.04.1	USN-6821-3
Ubuntu 20.04 LTS	linux-azure-5.15	5.15.0-1065.74~20.04.1	—
Ubuntu 20.04 LTS	linux-gcp-5.15	5.15.0-1062.70~20.04.1	USN-6820-1
Ubuntu 20.04 LTS	linux-gke +27	No fix yet	—
Ubuntu 20.04 LTS	linux-gkeop-5.15	5.15.0-1046.53~20.04.1	USN-6821-2
Ubuntu 20.04 LTS	linux-hwe-5.15	5.15.0-113.123~20.04.1	USN-6871-1
Ubuntu 20.04 LTS	linux-ibm-5.15	5.15.0-1057.60~20.04.1	USN-6892-1
Ubuntu 20.04 LTS	linux-intel-iotg-5.15	5.15.0-1058.64~20.04.1	USN-6828-1
Ubuntu 20.04 LTS	linux-lowlatency-hwe-5.15	5.15.0-110.120~20.04.1	USN-6820-1
Ubuntu 20.04 LTS	linux-nvidia-tegra-5.15	5.15.0-1027.27~20.04.1	—
Ubuntu 20.04 LTS	linux-oracle-5.15	5.15.0-1061.67~20.04.1	—
Ubuntu 20.04 LTS	linux-riscv-5.15	5.15.0-1059.63~20.04.1	—
Ubuntu 18.04 LTS	linux-gcp +13	No fix yet	—

Show 13 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	linux-hwe-edge	No fix yet	—
Ubuntu Pro Realtime 24.04 LTS	linux-raspi-realtime	6.8.0-2004.4	—
Ubuntu Pro Realtime 24.04 LTS	linux-realtime	6.8.1-1002.2	—
Ubuntu Pro Realtime 22.04 LTS	linux-intel-iot-realtime	5.15.0-1056.58	—
Ubuntu Pro Realtime 22.04 LTS	linux-realtime	5.15.0-1064.72	—
Ubuntu Pro FIPS 20.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS 18.04 LTS	linux-fips	No fix yet	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-aws-fips	5.15.0-1063.69+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-azure-fips	5.15.0-1065.74+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-fips	5.15.0-111.121+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-gcp-fips	5.15.0-1062.70+fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS-preview 22.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro 20.04 LTS	linux +10	No fix yet	—
Ubuntu Pro 18.04 LTS	linux +12	No fix yet	—
Ubuntu Pro 16.04 LTS	linux-gcp +4	No fix yet	—
Ubuntu Pro 14.04 LTS	linux-azure	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 9	bpftool	7.3.0-427.31.1.el9_4	RHSA-2024:5363
RHEL 9	rv +64	5.14.0-427.31.1.el9_4	RHSA-2024:5363
RHEL 8	kernel-rt +12	4.18.0-553.5.1.rt7.346.el8_10	RHSA-2024:3627
RHEL 8	perf +26	4.18.0-553.5.1.el8_10	RHSA-2024:3618

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
RHEL 9.2 EUS	bpftool	7.0.0-284.79.1.el9_2	RHSA-2024:5364
RHEL 9.2 EUS	kernel-rt +14	5.14.0-284.79.1.rt14.364.el9_2	RHSA-2024:5365
RHEL 9.2 EUS	perf +48	5.14.0-284.79.1.el9_2	RHSA-2024:5364

AlmaLinux

Release	Package	Fixed in	Advisory
AlmaLinux 9	bpftool	7.3.0-427.31.1.el9_4	ALSA-2024:5363
AlmaLinux 9	rv +60	5.14.0-427.31.1.el9_4	ALSA-2024:5363
AlmaLinux 8	kernel-rt +11	4.18.0-553.5.1.rt7.346.el8_10	ALSA-2024:3627
AlmaLinux 8	perf +24	4.18.0-553.5.1.el8_10	ALSA-2024:3618

Rocky Linux

Release	Package	Fixed in	Advisory
Rocky Linux 9	kernel	5.14.0-427.31.1.el9_4	RLSA-2024:5363
Rocky Linux 8	kernel	4.18.0-553.5.1.el8_10	RLSA-2024:3618
Rocky Linux 8	kernel-rt	4.18.0-553.5.1.rt7.346.el8_10	RLSA-2024:3627

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP5	kernel-64kb +6	5.14.21-150500.55.68.1	SUSE-SU-2024:2190-1
SLES 15 SP5	kernel-azure +2	5.14.21-150500.33.57.1	SUSE-SU-2024:2019-1
SLES 15 SP5	kernel-default-base	5.14.21-150500.55.68.1.150500.6.31.1	SUSE-SU-2024:2190-1

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLE Micro 6.0	kernel-default-base	6.4.0-17.1.1.51	SUSE-SU-2025:20008-1
SLE Micro 6.0	kernel-rt +1	6.4.0-9.1	SUSE-SU-2025:20028-1
SLE Micro 6.0	kernel-source +2	6.4.0-18.1	SUSE-SU-2025:20008-1
SLE Micro 5.5	kernel-default	5.14.21-150500.55.68.1	SUSE-SU-2024:2190-1
SLE Micro 5.5	kernel-default-base	5.14.21-150500.55.68.1.150500.6.31.1	SUSE-SU-2024:2190-1
SLE Micro 5.5	kernel-rt +1	5.14.21-150500.13.58.1	SUSE-SU-2024:2008-1
SLE Live Patching 15 SP5	kernel-default	5.14.21-150500.55.68.1	SUSE-SU-2024:2190-1
SLE Live Patching 15 SP5	kernel-livepatch-SLE15-SP5_Update_15 +1	1-150500.11.3.1	SUSE-SU-2024:2190-1, SUSE-SU-2024:2008-1
SUSE Real Time Module 15 SP5	kernel-rt +3	5.14.21-150500.13.58.1	SUSE-SU-2024:2008-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Leap 15.5	dtb-aarch64 +10	5.14.21-150500.55.68.1	SUSE-SU-2024:2190-1
openSUSE Leap 15.5	kernel-azure +2	5.14.21-150500.33.57.1	SUSE-SU-2024:2019-1
openSUSE Leap 15.5	kernel-default-base	5.14.21-150500.55.68.1.150500.6.31.1	SUSE-SU-2024:2190-1
openSUSE Leap 15.5	kernel-rt +3	5.14.21-150500.13.58.1	SUSE-SU-2024:2008-1

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 9	bpftool	7.3.0-427.31.1.el9_4	ELSA-2024-5363
Oracle Linux 9	rv +27	5.14.0-427.31.1.el9_4	ELSA-2024-5363
Oracle Linux 8	perf +19	4.18.0-553.5.1.el8_10	ELSA-2024-3618

Advisories 40

RHSA-2024:3627 Red Hat Security Advisory: kernel-rt security and bug fix update Red Hat Security Advisories (RHSA) · Nov 13, 2026
USN-6828-1 linux-intel-iotg-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
ALSA-2024:5363 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:3627 Moderate: kernel-rt security and bug fix update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2024:3618 Moderate: kernel update AlmaLinux Security Advisories · Oct 29, 2026
USN-6919-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6821-4 linux-azure, linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6878-1 linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6871-1 linux-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6816-1 linux, linux-ibm, linux-lowlatency, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6820-1 linux, linux-gcp, linux-gcp-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6821-1 linux-gke, linux-ibm, linux-intel-iotg, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6821-2 linux-gkeop, linux-gkeop-5.15, linux-kvm vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6821-3 linux-aws, linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6892-1 linux-ibm-5.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6817-3 linux-azure, linux-gke vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6820-2 linux-nvidia vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6817-1 linux-aws, linux-gcp vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6817-2 linux-oem-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
RHSA-2024:5365 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5364 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:5363 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2024:3618 Red Hat Security Advisory: kernel update Red Hat Security Advisories (RHSA) · Oct 15, 2026
SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
WID-SEC-2024-1008 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Oct 12, 2026
ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
SUSE-SU-2025:20008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
SUSE-SU-2025:20028-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
DSA-5681-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-3842-1 linux-5.10 - security update Debian Security (DSA / DLA) · Mar 9, 2026
WID-SEC-2024-1913 Red Hat OpenShift Container Platform: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 3, 2026
RLSA-2024:5363 Important: kernel security update Rocky Linux Security Advisories · Feb 4, 2026
RLSA-2024:3627 Moderate: kernel-rt security and bug fix update Rocky Linux Security Advisories · Feb 4, 2026
RLSA-2024:3618 Moderate: kernel update Rocky Linux Security Advisories · Feb 4, 2026
SUSE-SU-2024:2019-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:2190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2024:2008-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2025-0794 Juniper Junos Space: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 4, 2025
ELSA-2024-5363 Important: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Aug 14, 2024
ELSA-2024-3618 Moderate: kernel update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 5, 2024

References