CVE-2024-46827

wifi: ath12k: fix firmware crash due to invalid peer nss

published September 27, 2024

CVSS
—
EPSS
0%
Percentile
13.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix firmware crash due to invalid peer nss

Currently, if the access point receives an association

request containing an Extended HE Capabilities Information

Element with an invalid MCS-NSS, it triggers a firmware

crash.

This issue arises when EHT-PHY capabilities shows support

for a bandwidth and MCS-NSS set for that particular

bandwidth is filled by zeros and due to this, driver obtains

peer_nss as 0 and sending this value to firmware causes

crash.

Address this issue by implementing a validation step for

the peer_nss value before passing it to the firmware. If

the value is greater than zero, proceed with forwarding

it to the firmware. However, if the value is invalid,

reject the association request to prevent potential

firmware crashes.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.0.1-00029-QCAHKSWPL_SILICONZ-1

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.6th percentile
Published
2024-09-27T12:39Z
EPSS history
Timeline
  • 27 SEP 12:39Z
    wifi: ath12k: fix firmware crash due to invalid peer nss
    cvelistv5