CVE-2024-43847

HIGH

Linux Kernel 6.3-6.10.2 - Invalid Memory Access via Monitor Ring Processing

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo reinject ring share the same ring mask index. When the driver receives an interrupt for the reo reinject ring, the monitor ring is also processed, leading to invalid memory access. Since monitor support is not yet enabled in ath12k, the ring mask for the monitor ring should be removed. Tested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.1.1-00209-QCAHKSWPL_SILICONZ-1

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/8126f82dab7bd8b2e04799342b19fff0a1fd8575

Patch

https://git.kernel.org/stable/c/36fc66a7d9ca3e5c6eac25362cac63f83df8bed6

Patch

https://git.kernel.org/stable/c/073f9f249eecd64ab9d59c91c4a23cfdcc02afe4

Scores

CVSS v3 8.8

EPSS 0.0079

EPSS Percentile 52.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (11)

linux/Kernel 6.3.0 - 6.6.44linux

linux/Kernel 6.7.0 - 6.10.3linux

Linux/Linux < 6.3

Linux/Linux 6.10.3 - 6.10.*

Linux/Linux 6.11

Linux/Linux 6.3

Linux/Linux 6.6.44 - 6.6.*

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - 073f9f249eecd64ab9d59c91c4a23cfdcc02afe4

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - 36fc66a7d9ca3e5c6eac25362cac63f83df8bed6

Linux/Linux d889913205cf7ebda905b1e62c5867ed4e39f6c2 - 8126f82dab7bd8b2e04799342b19fff0a1fd8575

... and 1 more

Published Aug 17, 2024

Tracked Since Feb 18, 2026