In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
I found the following bug in my fuzzer:
UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51 index 255 is out of range for type 'htc_endpoint [22]' CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Workqueue: events request_firmware_work_func Call Trace: <TASK> dump_stack_lvl+0x180/0x1b0 __ubsan_handle_out_of_bounds+0xd4/0x130 htc_issue_send.constprop.0+0x20c/0x230 ? _raw_spin_unlock_irqrestore+0x3c/0x70 ath9k_wmi_cmd+0x41d/0x610 ? mark_held_locks+0x9f/0xe0 ...
Since this bug has been confirmed to be caused by insufficient verification of conn_rsp_epid, I think it would be appropriate to add a range check for conn_rsp_epid to htc_connect_service() to prevent the bug from occurring.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 24, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 24, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Dec 24, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-235-genericUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-57-genericUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oemUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1025-awsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1147-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-nvidiaUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-raspi2 | Feb 20, 2025 | Dec 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub