A critical out-of-bounds memory access vulnerability exists in the Linux kernel wilc1000 Wi-Fi driver that could allow an adjacent attacker to compromise system memory or cause a denial of service.

The wilc_parse_assoc_resp_info function fails to verify that the association response buffer is at least 6 bytes long before processing it. This allows an unauthenticated, adjacent attacker to trigger an out-of-bounds memory read (CWE-125) by sending a malformed, short association response frame.

Successful exploitation of this vulnerability could lead to significant information disclosure or system crashes. Because the flaw permits reading memory outside the intended buffer, sensitive data residing in kernel memory may be exposed. Given the CVSS score of 8.3, this vulnerability represents a high risk to organizational data integrity and system availability, particularly for infrastructure relying on the wilc1000 wireless chipset.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel-related faults or unexpected crashes occurring in wireless driver modules.

Compensating Controls: If immediate patching is not feasible, restrict wireless network access to trusted devices only and disable the wilc1000 driver if it is not required for system operations.

Public Exploit Available: No

This vulnerability presents a clear risk to system stability and memory security due to the potential for out-of-bounds access. Administrators should prioritize the deployment of the provided kernel updates across all affected systems. Ensuring that the wireless infrastructure is hardened and that kernel patching cycles are strictly followed will mitigate the risk posed by this flaw.