Vulnerability in ath5k: Out-of-Bounds Read in ath5k_eeprom_read_pcal_info_5111

Kernel Updated 02 Oct 2025

Summary

24/04/2022

Disclosed on

N/A

Severity

No i

Fix available

Unrated

Severity

Not published

CVSS Score

GSD-2022-1001087: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111. Affects Kernel versions < cbd96d6cad6625feba9c8d101ed4977d53e82f8e. No fix is published. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or Browse

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats

SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml

Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile

Javascript package-lock.json · yarn.lock · pnpm-lock.yaml

PHP composer.lock

Python poetry.lock · requirements.txt · Pipfile.lock

Go go.mod

Rust Cargo.lock

Ruby Gemfile.lock

Dart pubspec.lock

C/C++ conan.lock

Elixir mix.lock

Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

Background

The ath5k is a Linux kernel driver for Atheros 5xxx series wireless LAN devices. It provides support for various Atheros wireless chipsets, allowing communication between the kernel and the wireless hardware. The ath5k_eeprom_read_pcal_info_5111 function is responsible for reading power calibration information from the EEPROM on Atheros AR5111 chipsets. This vulnerability in the function can lead to an out-of-bounds read, potentially resulting in information disclosure or a system crash.

Vulnerability Detail

The vulnerability in ath5k lies in the ath5k_eeprom_read_pcal_info_5111 function. Due to improper bounds checking, an attacker can trigger an out-of-bounds read by providing specially crafted input. This can lead to the disclosure of sensitive information stored in memory or cause the system to crash. The impact and attack plausibility of this vulnerability have not been proven yet. It is fixed in Linux Kernel version v5.17.3 by commit cbd96d6cad6625feba9c8d101ed4977d53e82f8e.

How To Fix

No fixed version is published for this vulnerability.

To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.3 or later. This can be done by pulling the latest changes from the official Linux Kernel repository using the following command:

$ git pull https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

After updating the kernel, recompile and reinstall it on the affected system.

Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →

Workaround

There is no specific workaround mentioned for this vulnerability.

Conclusion

In conclusion, the vulnerability in ath5k's ath5k_eeprom_read_pcal_info_5111 function can lead to an out-of-bounds read, potentially resulting in information disclosure or system crashes. It is recommended to update the Linux Kernel to version v5.17.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.

See every vulnerability recorded for Kernel →