CVE-2023-52829
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() reg_cap.phy_id is extracted from WMI event and could be an unexpected value in case some errors happen.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps() reg_cap.phy_id is extracted from WMI event and could be an unexpected value in case some errors happen. As a result out-of-bound write may occur to soc->hal_reg_cap. Fix it by validating reg_cap.phy_id before using it. This is found during code review. Compile tested only.
- CVSS 3.1
- 8.4 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/4dd0547e8b45faf6f95373be5436b66cde326c0ePatch
- https://git.kernel.org/stable/c/b302dce3d9edea5b93d1902a541684a967f3c63cPatch
- https://git.kernel.org/stable/c/dfe13eaab043130f90dd3d57c7d88577c04adc97Patch
- https://git.kernel.org/stable/c/4dd0547e8b45faf6f95373be5436b66cde326c0ePatch
- https://git.kernel.org/stable/c/b302dce3d9edea5b93d1902a541684a967f3c63cPatch
- https://git.kernel.org/stable/c/dfe13eaab043130f90dd3d57c7d88577c04adc97Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.