Vulnerability in ath9k_htc package: Potential Out of Bounds Access
Summary
GSD-2022-1004017: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix. Affects Kernel versions >= 4ed1a8d4a25711f780b96920fff2bb531229e322, < a048e0c3caa852397b7b50d4c82a0415c05f7ac3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath9k_htc package is a wireless driver for Atheros IEEE 802.11n devices. It is a part of the Linux Kernel ecosystem and is responsible for enabling communication between the operating system and Atheros wireless devices. This package provides support for various features such as wireless connectivity, signal strength monitoring, and packet handling. However, a vulnerability has been discovered in the package that could lead to potential out of bounds access.
Vulnerability Detail
The vulnerability in the ath9k_htc package arises from a potential out of bounds access with an invalid rxstatus->rs_keyix. This vulnerability could be exploited by an attacker to gain unauthorized access or execute arbitrary code on a system using the affected package. The exact impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in the Linux Kernel version v4.14.283 by commit a048e0c3caa852397b7b50d4c82a0415c05f7ac3. However, it was introduced in version v3.15 by commit 4ed1a8d4a25711f780b96920fff2bb531229e322.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to update the Linux Kernel to the fixed version.
Conclusion
In conclusion, the ath9k_htc package in the Linux Kernel is vulnerable to a potential out of bounds access. This vulnerability has been fixed in the Linux Kernel version v4.14.283. It is crucial to update the kernel to ensure the security of systems using the affected package. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ath9k_htc package is a wireless driver for Atheros IEEE 802.11n devices in the Linux Kernel ecosystem. It enables communication between the operating system and Atheros wireless devices.
The impact of this vulnerability is not yet proven. However, if exploited, it could lead to unauthorized access or arbitrary code execution on systems using the affected package.
Yes, this vulnerability has been fixed in the Linux Kernel version v4.14.283 by commit a048e0c3caa852397b7b50d4c82a0415c05f7ac3.
To update the Linux Kernel, follow the standard update process for your Linux distribution. This typically involves using package managers like apt or yum to install the latest kernel updates.
No specific workaround is mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
