CVE-2024-43847

CVE-2024-43847

High · published August 17, 2024

CVSS v3.1
8.8
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid memory access while processing fragmented packets

The monitor ring and the reo reinject ring share the same ring mask index.

When the driver receives an interrupt for the reo reinject ring, the

monitor ring is also processed, leading to invalid memory access. Since

monitor support is not yet enabled in ath12k, the ring mask for the monitor

ring should be removed.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Published
2024-08-17T14:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.3, < 6.6.446.6.44
linux/linux_kernel≥ 6.7, < 6.10.36.10.3
References (3)
https://git.kernel.org/stable/c/073f9f249eecd64ab9d59c91c4a23cfdcc02afe4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/36fc66a7d9ca3e5c6eac25362cac63f83df8bed6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8126f82dab7bd8b2e04799342b19fff0a1fd8575 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 17 AUG 09:22Z
    wifi: ath12k: fix invalid memory access while processing fragmented packets
    cvelistv5