Vulnerability in ath9k_htc package: Potential Out of Bounds Access
Summary
GSD-2022-1003803: ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix. Affects Kernel versions >= 4ed1a8d4a25711f780b96920fff2bb531229e322, < 2326d398ccd41ba6d93b8346532dfa432ab00fee. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath9k_htc package is a component of the Linux Kernel ecosystem. It provides support for Atheros wireless devices using the HTB (High Throughput Block) interface. The package allows users to connect to wireless networks and utilize various networking functionalities. However, a vulnerability has been discovered in the package that could lead to potential out of bounds access.
Vulnerability Detail
The vulnerability in the ath9k_htc package arises from a potential out of bounds access with an invalid rxstatus->rs_keyix. This vulnerability could be exploited by an attacker to gain unauthorized access or execute arbitrary code on a system utilizing the affected package. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.4.198 by commit 2326d398ccd41ba6d93b8346532dfa432ab00fee. The vulnerability was introduced in version v3.15 by commit 4ed1a8d4a25711f780b96920fff2bb531229e322.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel to the patched version.
Conclusion
In conclusion, the ath9k_htc package in the Linux Kernel is vulnerable to a potential out of bounds access. It is crucial to update the Linux Kernel to version v5.4.198 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ath9k_htc package is a component of the Linux Kernel ecosystem that provides support for Atheros wireless devices using the HTB interface.
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to gain unauthorized access or execute arbitrary code on a system utilizing the affected package.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.198 or later.
There is no specific workaround mentioned for this vulnerability. The recommended approach is to apply the fix by updating the Linux Kernel.
For more information about this vulnerability, you can refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
