CVE-2024-49931: wifi: ath12k: fix array out-of-bound access in SoC stats
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix array out-of-bound access in SoC stats
Currently, the ath12ksocdpstats::halreoerror array is defined with a maximum size of DPREODSTRINGMAX. However, the ath12kdprxprocess() function access ath12ksocdpstats::halreoerror using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath12kdprxprocess() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access.
Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPLSILICONZ-1
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49931?
CVE-2024-49931 is classified with medium severity due to its potential impact on system stability and security.
How do I fix CVE-2024-49931?
To fix CVE-2024-49931, users should update their Linux kernel to versions after 6.10.14 or 6.11.3 and below 6.6.55.
What are the affected versions for CVE-2024-49931?
CVE-2024-49931 affects Linux kernel versions between 6.7 and 6.10.14 and between 6.11 and 6.11.3, as well as versions below 6.6.55.
What vulnerability does CVE-2024-49931 address?
CVE-2024-49931 addresses an array out-of-bounds access vulnerability in the ath12k driver related to SoC stats.
Who is impacted by CVE-2024-49931?
Users running affected versions of the Linux kernel with the ath12k driver are at risk from CVE-2024-49931.