CVE-2023-54071

A flaw was identified in the Linux kernel’s rtw88 Wi-Fi driver (drivers/net/wireless/realtek/rtw88) where the ieee80211_ops::sta_rc_update callback was invoked within a Read-Copy-Update (RCU) read-side critical section without proper atomicity or deferral. The ieee80211_chan_bw_change() function holds an RCU read lock while calling into drv_sta_rc_update(), and under these conditions, the driver could perform work that may trigger a voluntary context switch inside the RCU protection region. This improper synchronization can lead to unpredictable kernel behavior, including WARN messages, instability in wireless operations, and potential denial-of-service scenarios.

This vulnerability is rated as Moderate because triggering the condition requires an active Realtek rtw88 wireless network device and causes kernel instability or a localized denial of service rather than code execution or privilege escalation. Standard enterprise server installations typically do not utilize Wi-Fi interfaces, significantly restricting exposure in datacenter environments. Impact is primarily confined to client systems or workstations utilizing affected Realtek Wi-Fi chipsets during dynamic bandwidth or channel-switching operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.