Riskcovery

CVE-2024-49931

wifi: ath12k: fix array out-of-bound access in SoC stats

State
Published
Severity
Not scored
Published
Oct 21, 2024
Updated
May 11, 2026
Reserved
Oct 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix array out-of-bound access in SoC stats

Currently, the ath12k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath12k_dp_rx_process() function access ath12k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath12k_dp_rx_process() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before d0e4274d9dc9f8409d56d622cd3ecf7b6fd49e2fAffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before a4aef827a41cdaf6201bbaf773c1eae4e20e967bAffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before ad791e3ec60cb66c1e4dc121ffbf872df312427dAffected
  • d889913205cf7ebda905b1e62c5867ed4e39f6c2 to before e106b7ad13c1d246adaa57df73edb8f8b8acb240Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.6.55 through 6.6.*Not affected
  • 6.10.14 through 6.10.*Not affected
  • 6.11.3 through 6.11.*Not affected
  • 6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.