CVE-2024-53188

Summary

CVE-2024-53188: A vulnerability in the Linux kernel wifi driver, ath12k, has been identified and resolved. During the initialization process, if there is an error leading to the call of ath12k_dp_cc_cleanup to release resources, these resources are unexpectedly released again upon device unbind (ath12k_pci). Consequently, a NULL pointer dereference occurs, leading to a kernel panic. Reproducibility of this issue is guaranteed in virtual machine environments due to failed MSI addressing initialization. To mitigate the issue, the released structure in ath12k_dp_cc_cleanup needs to be set to NULL at the end.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.