Vulnerability in ath10k: Fix error handling in ath10k_setup_msa_resources
Summary
GSD-2022-1001212: ath10k: Fix error handling in ath10k_setup_msa_resources. Affects Kernel versions >= 727fec790ead3d75e2735f66209949c2163523ea, < 4ed37d611ea5d222c3ecb3549e4c2d34b8f3c335. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath10k package is a component of the Linux Kernel ecosystem. It provides support for wireless LAN devices based on the Qualcomm Atheros QCA988x family of chipsets. The package enables communication between the kernel and the wireless LAN hardware, allowing for wireless network functionality on Linux systems.
Vulnerability Detail
The vulnerability identified in ath10k relates to error handling in the ath10k_setup_msa_resources function. The issue was introduced in version v5.8 of the Linux Kernel and fixed in version v5.17.2. The vulnerability could potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code. Further technical details and attack vectors have not been proven at this time.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in ath10k related to error handling in ath10k_setup_msa_resources has been identified and fixed in Linux Kernel version v5.17.2. It is recommended to update the Linux Kernel to the latest version to mitigate the risk of exploitation. For further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ath10k is a package within the Linux Kernel ecosystem that enables wireless LAN functionality on Linux systems, specifically for Qualcomm Atheros QCA988x chipsets.
The vulnerability could potentially lead to a denial-of-service (DoS) condition or allow an attacker to execute arbitrary code.
To fix this vulnerability, update the Linux Kernel to version v5.17.2 or later.
The updated Linux Kernel source code can be obtained from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
