Riskcovery

CVE-2024-43847

wifi: ath12k: fix invalid memory access while processing fragmented packets

State
Published
Severity
8.8 High
Published
Aug 17, 2024
Updated
Aug 5, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid memory access while processing fragmented packets

The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access. Since monitor support is not yet enabled in ath12k, the ring mask for the monitor ring should be removed.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 8126f82dab7bd8b2e04799342b19fff0a1fd8575Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 36fc66a7d9ca3e5c6eac25362cac63f83df8bed6Affected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before 073f9f249eecd64ab9d59c91c4a23cfdcc02afe4Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.44 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.