CVE-2023-52829: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix possible out-of-bound write in ath12kwmiexthalregcaps()
regcap.phyid is extracted from WMI event and could be an unexpected value in case some errors happen. As a result out-of-bound write may occur to soc->halregcap. Fix it by validating regcap.phyid before using it.
This is found during code review.
Compile tested only.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52829?
CVE-2023-52829 has a moderate severity level due to the potential for out-of-bound write vulnerabilities in the Linux kernel.
How do I fix CVE-2023-52829?
To fix CVE-2023-52829, update to the latest version of the Linux kernel where this vulnerability has been patched.
What versions of the Linux kernel are affected by CVE-2023-52829?
CVE-2023-52829 affects various versions of the Linux kernel that utilize the ath12k driver.
What systems are primarily impacted by CVE-2023-52829?
Systems running vulnerable versions of the Linux kernel with the ath12k wireless driver are primarily impacted by CVE-2023-52829.
What are the potential consequences of CVE-2023-52829?
Potential consequences of CVE-2023-52829 include system instability and exploitation leading to unauthorized access or privilege escalation.