CVE-2023-52827
Assigner: Linux
Published: 2024-05-21T15:31:30.837Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()

len is extracted from HTT message and could be an unexpected value in
case errors happen, so add validation before using to avoid possible
out-of-bound read in the following message iteration and parsing.

The same issue also applies to ppdu_info->ppdu_stats.common.num_users,
so validate it before using too.

These are found during code review.

Compile test only.
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: 79527c21a3ce
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: c9e44111da22
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 1bc44a505a22
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 6.5.13
lessThanOrEqual: 6.5.*
status: unaffected
versionType: custom
version: 6.6.3
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
x_generator: engine: bippy-d175d3acf727