CVE-2024-58015

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix for out-of bound access error

Selfgen stats are placed in a buffer using print_array_to_buf_index() function. Array length parameter passed to the function is too big, resulting in possible out-of bound memory error. Decreasing buffer size by one fixes faulty upper bound of passed array.

Discovered in coverity scan, CID 1600742 and CID 1600758

This vulnerability is evaluated as having a Moderate impact because exploitation requires local administrative privileges and is restricted to systems equipped with Qualcomm ath12k wireless hardware. The flaw resides in the driver's debugfs statistics reporting mechanism, which is accessible only to privileged users. While an out-of-bounds read can lead to a system crash or leak kernel memory, standard enterprise deployments rarely use this wireless hardware or expose debugfs interfaces to unprivileged environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.