In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
len is extracted from HTT message and could be an unexpected value in
case errors happen, so add validation before using to avoid possible
out-of-bound read in the following message iteration and parsing.
The same issue also applies to ppdu_info->ppdu_stats.common.num_users,
so validate it before using too.
These are found during code review.
Compile test only.
References
Configurations
Configuration 1 (hide)
|
History
24 May 2024, 01:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux
Linux linux Kernel |
|
| CWE | CWE-125 | |
| References | () https://git.kernel.org/stable/c/79527c21a3ce04cffc35ea54f74ee087e532be57 - Patch | |
| References | () https://git.kernel.org/stable/c/1bc44a505a229bb1dd4957e11aa594edeea3690e - Patch | |
| References | () https://git.kernel.org/stable/c/c9e44111da221246efb2e623ae1be40a5cf6542c - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
21 May 2024, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-21 16:15
Updated : 2024-05-24 01:14
NVD link : CVE-2023-52827
Mitre link : CVE-2023-52827
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-125
Out-of-bounds Read