SECUFOCUSNOW
Home›CVE index›CVE-2023-52827
Review reviewHigh

CVE-2023-52827

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read in the following message iteration and parsing. The same issue also applies to ppdu_info->ppdu_stats.common.num_users, so validate it before using too. These are found during code review. Compile test only.

CVSS
7.1
EPSS
0.26%
17.8% percentile
CISA KEV
Not listed
Published
2024.05.22
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.26%
Technical severityCVSS 7.1

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats() len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read in the following message iteration and parsing. The same issue also applies to ppdu_info->ppdu_stats.common.num_users, so validate it before using too. These are found during code review. Compile test only.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 79527c21a3ce04cffc35ea54f74ee087e532be57, >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < c9e44111da221246efb2e623ae1be40a5cf6542c, >= d889913205cf7ebda905b1e62c5867ed4e39f6c2 < 1bc44a505a229bb1dd4957e11aa594edeea3690e, >= 6.3, < 6.5.13, >= 6.6 < 6.6.3
Fixed versions
6.5.13, 6.6.3

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE
CWE-125