CVE - CVE-2024-49930

CVE-ID
CVE-2024-49930	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix array out-of-bound access in SoC stats Currently, the ath11k_soc_dp_stats::hal_reo_error array is defined with a maximum size of DP_REO_DST_RING_MAX. However, the ath11k_dp_process_rx() function access ath11k_soc_dp_stats::hal_reo_error using the REO destination SRNG ring ID, which is incorrect. SRNG ring ID differ from normal ring ID, and this usage leads to out-of-bounds array access. To fix this issue, modify ath11k_dp_process_rx() to use the normal ring ID directly instead of the SRNG ring ID to avoid out-of-bounds array access. Tested-on: QCN9074 hw1.0 PCI WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/01b77f5ee11c89754fb836af8f76799d3b72ae2f URL:https://git.kernel.org/stable/c/01b77f5ee11c89754fb836af8f76799d3b72ae2f MISC:https://git.kernel.org/stable/c/0f26f26944035ec67546a944f182cbad6577a9c0 URL:https://git.kernel.org/stable/c/0f26f26944035ec67546a944f182cbad6577a9c0 MISC:https://git.kernel.org/stable/c/4dd732893bd38cec51f887244314e2b47f0d658f URL:https://git.kernel.org/stable/c/4dd732893bd38cec51f887244314e2b47f0d658f MISC:https://git.kernel.org/stable/c/6045ef5b4b00fee3629689f791992900a1c94009 URL:https://git.kernel.org/stable/c/6045ef5b4b00fee3629689f791992900a1c94009 MISC:https://git.kernel.org/stable/c/69f253e46af98af17e3efa3e5dfa72fcb7d1983d URL:https://git.kernel.org/stable/c/69f253e46af98af17e3efa3e5dfa72fcb7d1983d MISC:https://git.kernel.org/stable/c/73e235728e515faccc104b0153b47d0f263b3344 URL:https://git.kernel.org/stable/c/73e235728e515faccc104b0153b47d0f263b3344 MISC:https://git.kernel.org/stable/c/7a552bc2f3efe2aaf77a85cb34cdf4a63d81a1a7 URL:https://git.kernel.org/stable/c/7a552bc2f3efe2aaf77a85cb34cdf4a63d81a1a7
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)