A high severity slab out of bounds read vulnerability in the Linux kernel mwifiex driver may allow for system instability or unauthorized information disclosure.

The mwifiex wireless driver fails to validate the length of event frames provided by device firmware. An unauthenticated attacker in proximity can trigger this flaw, leading to a slab out of bounds read when the kernel iterates over maliciously crafted information elements.

Successful exploitation of this vulnerability can lead to kernel memory disclosure or system crashes, resulting in denial of service for wireless connectivity. While the vulnerability requires local proximity for exploitation, the impact is significant given the potential for kernel level memory corruption. With a CVSS score of 8.8, this flaw represents a high risk to availability and system integrity.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic messages related to the mwifiex driver, which may indicate attempted exploitation.

Compensating Controls: If patching is delayed, restrict wireless network access to trusted devices to mitigate the risk of proximity based attacks.

Public Exploit Available: Unknown

This vulnerability presents a serious risk to kernel stability and security. Administrators should prioritize the application of kernel updates across all affected systems that utilize the mwifiex wireless driver. Testing these updates in a staging environment is advised to ensure compatibility before broad deployment.