Vulnerability in ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
Summary
GSD-2022-1001418: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111. Affects Kernel versions < fc8f7752a82f4accb99c0f1a868906ba1eb7b86f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ath5k package is a Linux kernel module that provides support for Atheros 5xxx series wireless LAN cards. It allows users to connect to wireless networks and communicate wirelessly. The vulnerability in question affects the ath5k_eeprom_read_pcal_info_5111 function within the package. This function is responsible for reading power calibration information from the EEPROM of Atheros 5111 wireless LAN cards.
Vulnerability Detail
The vulnerability in ath5k_eeprom_read_pcal_info_5111 function allows for an out-of-bounds (OOB) read access. An attacker could exploit this vulnerability by sending specially crafted input to the affected function, leading to the disclosure of sensitive information or a denial of service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.16.20 by commit fc8f7752a82f4accb99c0f1a868906ba1eb7b86f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
In conclusion, the ath5k package in the Linux Kernel is vulnerable to an out-of-bounds read access in the ath5k_eeprom_read_pcal_info_5111 function. This vulnerability can be fixed by updating the Linux Kernel to version v5.16.20 or later. No known workaround is available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ath5k is a Linux kernel module that provides support for Atheros 5xxx series wireless LAN cards.
The impact of this vulnerability could include the disclosure of sensitive information or a denial of service (DoS) condition.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.16.20 or later by following the steps mentioned in the 'how_to_fix' section.
No, there is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
