Riskcovery

CVE-2023-52827

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

State
Published
Severity
7.7 High
Published
May 21, 2024
Updated
Aug 5, 2026
Reserved
May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read in the following message iteration and parsing.

The same issue also applies to ppdu_info->ppdu_stats.common.num_users, so validate it before using too.

These are found during code review.

Compile test only.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 79527c21a3ce04cffc35ea54f74ee087e532be57Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before c9e44111da221246efb2e623ae1be40a5cf6542cAffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 1bc44a505a229bb1dd4957e11aa594edeea3690eAffected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.5.13 through 6.5.*Not affected
  • 6.6.3 through 6.6.*Not affected
  • 6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.