In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix possible out-of-bound read in ath12k_htt_pull_ppdu_stats()
len is extracted from HTT message and could be an unexpected value in case errors happen, so add validation before using to avoid possible out-of-bound read in the following message iteration and parsing.
The same issue also applies to ppdu_info->ppdu_stats.common.num_users, so validate it before using too.
These are found during code review.
Compile test only.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-lgUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-xilinx | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub