-

CVE-2026-92497

wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()

In the Linux kernel, the following vulnerability has been resolved:

wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()

Currently, in ath12k_wmi_op_rx(), the firmware buffer is read without
first verifying that the buffer has enough data to hold a header. This
could result in a buffer overread.

Update the logic to verify the buffer contains at least enough data to
hold a wmi_cmd_hdr before reading from the buffer.

Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.1.1.c7-00108-QCAHMTSWPL_V1.0_V2.0_SILICONZ_UPSTREAM-3
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version d889913205cf7ebda905b1e62c5867ed4e39f6c2
Version < 9784faa6afd26693287e8e4569bdedee00212909
Status affected
Version d889913205cf7ebda905b1e62c5867ed4e39f6c2
Version < 07659388110de004cbb753f3c7bc85e657e51f7a
Status affected
Version d889913205cf7ebda905b1e62c5867ed4e39f6c2
Version < 95d1bd1db9e9d8eccffc880166e01c4775115716
Status affected
Version d889913205cf7ebda905b1e62c5867ed4e39f6c2
Version < 9e6ec0977f0b9c16fc20efea050e3eea8f66e34b
Status affected
Version d889913205cf7ebda905b1e62c5867ed4e39f6c2
Version < 7698656a2f7b045af5a6859766238cefea1b1945
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.3
Status affected
Version 0
Version < 6.3
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.065
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9784faa6afd26693287e8e4569bdedee00212909
https://git.kernel.org/stable/c/07659388110de004cbb753f3c7bc85e657e51f7a
https://git.kernel.org/stable/c/95d1bd1db9e9d8eccffc880166e01c4775115716
https://git.kernel.org/stable/c/9e6ec0977f0b9c16fc20efea050e3eea8f66e34b
https://git.kernel.org/stable/c/7698656a2f7b045af5a6859766238cefea1b1945