CVE-2024-43847

medium

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access. Since monitor support is not yet enabled in ath12k, the ring mask for the monitor ring should be removed. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1

References

https://git.kernel.org/stable/c/8126f82dab7bd8b2e04799342b19fff0a1fd8575

https://git.kernel.org/stable/c/36fc66a7d9ca3e5c6eac25362cac63f83df8bed6

https://git.kernel.org/stable/c/073f9f249eecd64ab9d59c91c4a23cfdcc02afe4

Details

Source: Mitre, NVD

Published: 2024-08-17

Updated: 2024-08-19

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium