Memory Corruption Vulnerability in ath11k WiFi Driver by Linux Kernel

CVE-2023-53315

What is CVE-2023-53315?

An issue has been identified in the ath11k WiFi driver within the Linux kernel where an invalid RX descriptor from the REO destination ring can lead to memory corruption. This occurs when a descriptor filled with a value of '0' is processed, causing the incorrect SKB to be fetched. The result may eventually lead to a system crash after prolonged usage. To mitigate this risk, changes were made to the IDR (Identifier Resource) allocation, reserving buffer id '0' for error validation and implementing sanity checks prior to processing descriptors.

References