CVE-2024-57997

In the Linux kernel, the following vulnerability has been resolved:

wifi: wcn36xx: fix channel survey memory allocation size

KASAN reported a memory allocation issue in wcn->chan_survey due to incorrect size calculation. This commit uses kcalloc to allocate memory for wcn->chan_survey, ensuring proper initialization and preventing the use of uninitialized values when there are no frames on the channel.

This vulnerability is rated as Moderate impact for Red Hat because exploitation requires the presence of specialized Qualcomm wireless hardware, restricting the practical attack surface and potential blast radius. The issue stems from an incorrect memory allocation size calculation in the wcn36xx wireless driver during channel survey handling, which can trigger kernel instability or denial of service. Standard Red Hat Enterprise Linux deployments rarely employ this consumer wireless chipset, and default enterprise installations do not include the vulnerable upstream code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.