Locking Flaw in Linux Kernel Affecting RTL8723BS Driver

CVE-2023-53281

What is CVE-2023-53281?

A vulnerability in the Linux kernel's RTL8723BS driver was introduced due to the use of inappropriate locking mechanisms. The function _rtw_join_timeout_handler() incorrectly switched to spin_lock_irq() from spin_lock_bh(), which disables IRQs unnecessarily during execution. This alteration led to a problematic situation, particularly when the function does not require IRQ disabling, resulting in potential system disruptions as seen in kernel warnings. The solution includes reverting to the use of spin_lock_bh() to ensure proper handling of lock operations without interfering with IRQ processing.

References