CVE-2023-52829

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix possible out-of-bound write in ath12k_wmi_ext_hal_reg_caps()

reg_cap.phy_id is extracted from WMI event and could be an unexpected value in case some errors happen. As a result out-of-bound write may occur to soc->hal_reg_cap. Fix it by validating reg_cap.phy_id before using it.

This is found during code review.

Compile tested only.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd889913205cf7ebda905b1e62c5867ed4e39f6c2 < dfe13eaab043130f90dd3d57c7d88577c04adc97affected
LinuxLinuxd889913205cf7ebda905b1e62c5867ed4e39f6c2 < 4dd0547e8b45faf6f95373be5436b66cde326c0eaffected
LinuxLinuxd889913205cf7ebda905b1e62c5867ed4e39f6c2 < b302dce3d9edea5b93d1902a541684a967f3c63caffected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux6.5.13 <= 6.5.*unaffected
LinuxLinux6.6.3 <= 6.6.*unaffected
LinuxLinux6.7 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References