CVE-2024-43847

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: fix invalid memory access while processing fragmented packets

The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access. Since monitor support is not yet enabled in ath12k, the ring mask for the monitor ring should be removed.

Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1

A low severity flaw was found in the Linux kernel ath12k Wi-Fi driver, where the monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access while processing fragmented packets. This can cause a kernel crash on systems using supported Qualcomm Wi-Fi 7 hardware such as QCN9274, affecting availability only, with no impact on confidentiality or integrity. Red Hat Product Security rated this flaw Low severity (CVSS 2.3, local attack vector, high privileges required, availability-only impact), which differs significantly from the Important (8.8) severity published by NIST and the CVE record issuer, because triggering the invalid memory access requires a system with the affected ath12k driver and supported Qualcomm Wi-Fi 7 hardware, and the consequence is limited to availability. The vulnerable code was introduced upstream in Linux 6.3 and is shipped in the community kernels used by Fedora, which is the only affected product in scope, and a fix is being pursued for Fedora through community kernel updates. All Red Hat Enterprise Linux 6, 7, 8, and 9 kernel and kernel-rt streams are not affected because the affected ath12k driver code is not present in the RHEL kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.