CVE-2023-53721

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix a NULL pointer dereference in ath12k_mac_op_hw_scan()

In ath12k_mac_op_hw_scan(), the return value of kzalloc() is directly used in memcpy(), which may lead to a NULL pointer dereference on failure of kzalloc().

Fix this bug by adding a check of arg.extraie.ptr.

Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.0-03427-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.15378.4

ath12k_mac_op_hw_scan() used the pointer returned by kzalloc() without checking it, leading to a potential NULL dereference if allocation failed. Triggering requires local ability to initiate hw scans on an ath12k interface (typically via nl80211 through system network services). Impact is limited to local availability (kernel oops).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.