Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2023-52827

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read in the following message iteration and parsing. The same issue also applies to ppdu_info->ppdu_stats.common.num_users, so validate it before using too. These are found during code review. Compile test only.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to < 79527c21a3ce04cffc35ea54f74ee087e532be57affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to < c9e44111da221246efb2e623ae1be40a5cf6542caffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to < 1bc44a505a229bb1dd4957e11aa594edeea3690eaffected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References