CVE-2026-46307

A flaw was found in the Linux kernel's ath5k Wi-Fi driver. This vulnerability allows for an array-index-out-of-bounds write in the ath5k_tasklet_tx function. An attacker could potentially trigger this by manipulating specific index values, leading to a minor data corruption. The immediate impact of this out-of-bounds write is considered negligible, affecting only the ack_signal member of the info->status structure.

Red Hat has evaluated this issue as having a Moderate severity because exploitation requires a system configured with specific Atheros wireless hardware utilizing the ath5k kernel driver, and the memory corruption is strictly confined to overwriting an adjacent field in the transmission status structure. On typical enterprise server deployments, wireless hardware interfaces are not present or active, significantly limiting practical exposure. Furthermore, the out-of-bounds write does not provide arbitrary code execution capabilities, restricting the blast radius to localized and negligible data corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.