Vulnerability in ath9k_htc Package: Potential Out of Bounds Access
Summary
GSD-2022-1002793: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix. Affects Kernel versions >= 4ed1a8d4a25711f780b96920fff2bb531229e322, < 3dad3fed5672828c7fb0465cb66a3d9a70952fa6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath9k_htc package is a wireless driver for Atheros Communications 802.11n USB devices. It is a part of the Linux Kernel ecosystem and is responsible for enabling wireless connectivity on compatible devices. This vulnerability affects versions of the Linux Kernel starting from v3.15 up to v5.18.2. The package is susceptible to a potential out of bounds access issue when handling invalid rxstatus->rs_keyix values.
Vulnerability Detail
The vulnerability arises from a potential out of bounds access in the ath9k_htc package. When processing invalid rxstatus->rs_keyix values, the package may access memory beyond its intended boundaries. This could lead to memory corruption, crashes, or potential exploitation by malicious actors. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround available for this vulnerability. It is advised to update the Linux Kernel to the latest stable version as mentioned in the 'how_to_fix' section.
Conclusion
In conclusion, the ath9k_htc package in the Linux Kernel is vulnerable to a potential out of bounds access issue. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.18.3 or later. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ath9k_htc package is a wireless driver for Atheros Communications 802.11n USB devices. It enables wireless connectivity on compatible devices.
The impact of this vulnerability is not yet proven. However, it could potentially lead to memory corruption, crashes, or exploitation by malicious actors.
To fix this vulnerability, update the Linux Kernel to version v5.18.3 or later, which includes the necessary patch.
No specific workarounds are available for this vulnerability. Updating the Linux Kernel to the latest stable version is the recommended solution.
For more information about this vulnerability, you can refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
