Read-After-Free Vulnerability in Linux Kernel's ath12k WLAN Driver

CVE-2024-57995

Summary

A read-after-free vulnerability exists in the ath12k WLAN driver within the Linux kernel. This issue arises when an arbitrary virtual interface (arvif) is assigned to a different radio and subsequently gets deleted. During the deletion, the arvif pointer is freed, leading to a situation where a check involving the arvif pointer can result in accessing invalid memory. The issue has been resolved by adjusting the order of operations to ensure that the pointer check occurs after it is properly reassigned, thus eliminating the risk of unintended memory access.

References