Linux Kernel Vulnerability in ath12k Wireless Module by Qualcomm

CVE-2023-53764

What is CVE-2023-53764?

A vulnerability exists in the ath12k module of the Linux kernel, where the function ath12k_peer_find_by_id() is called without holding the required base lock during certain error handling paths. This improper lock handling can lead to potential security issues when processing wireless network packets. The issue has been identified on specific hardware, specifically the QCN9274 chipset, and highlights the need for appropriate lock management to ensure the reliable function of wireless communications.

References