CVE-2025-38317

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Fix buffer overflow in debugfs

If the user tries to write more than 32 bytes then it results in memory corruption. Fortunately, this is debugfs so it's limited to root users.

A buffer overflow was found in the ath12k_write_htt_stats_type() function of the ath12k Wi-Fi driver when writing to a debugfs interface. Specifically, the input buffer was not properly bounded, allowing users to write more than 32 bytes, leading to potential memory corruption. The issue is limited to local, privileged users who have access to debugfs — typically only root or processes with CAP_SYS_ADMIN. Therefore, Privileges Required High (PR:H) for the CVSS. Exploitation does not require user interaction and can lead to limited confidentiality, integrity, and availability impact through memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.