CVE-2023-52827

Summary

CVE-2023-52827 is a newly identified vulnerability in the Linux kernel. This issue affects the wifi driver, ath12k, and could potentially lead to an out-of-bound read error. The problem stems from an unexpected value assigned to the variable 'len' extracted from an HTT message. To mitigate this risk, validation checks have been added before using the length value to prevent out-of-bound reading. This vulnerability also affects 'ppdu_info->ppdu_stats.common.num_users', and proper validation is necessary before accessing this value as well. These issues were discovered during a code review and have only been identified during compile testing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.