CVE-2025-38317: wifi: ath12k: Fix buffer overflow in debugfs
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: Fix buffer overflow in debugfs
If the user tries to write more than 32 bytes then it results in memory corruption. Fortunately, this is debugfs so it's limited to root users.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel wifi: ath12k debugfsto a version that resolves this vulnerability.Patch Fix buffer overflow in debugfs
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation is limited to root users because the affected interface is exposed through debugfs. An attacker would need local privileged access to write to the relevant debugfs entry.
What input triggers the memory corruption?
Writing more than 32 bytes to the affected debugfs interface causes the buffer overflow and resulting memory corruption.
Are systems using the normal runtime Wi-Fi interface affected?
The provided information identifies the vulnerable path as ath12k debugfs. It does not indicate that normal, non-debugfs Wi-Fi operation triggers the issue.