CVE-2023-52827CWE-125

CVE-2023-52827

High · published May 21, 2024

CVSS v3.1
7.7
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

len is extracted from HTT message and could be an unexpected value in

case errors happen, so add validation before using to avoid possible

out-of-bound read in the following message iteration and parsing.

The same issue also applies to ppdu_info->ppdu_stats.common.num_users,

so validate it before using too.

These are found during code review.

Compile test only.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00264 · 17.3th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2024-05-21T20:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (6)
EPSS history
Timeline
  • 21 MAY 15:31Z
    wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
    cvelistv5