The Linux kernel contains an out-of-bounds read vulnerability in the ath6kl Wi-Fi driver, which poses a significant risk of memory corruption and potential system instability for affected devices.

The ath6kl_wmi_connect_event_rx function fails to validate firmware-controlled information element lengths against actual buffer sizes, leading to out-of-bounds reads. This flaw can be triggered by an unauthenticated attacker within radio range of the target device.

A successful exploit could lead to unauthorized information disclosure or a denial-of-service condition due to kernel state corruption. Given the CVSS score of 8.3, this vulnerability is categorized as high severity because it allows an attacker to compromise the integrity and availability of the kernel, potentially impacting the entire system operation.

Immediate Action: Update the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or later as appropriate for your distribution.

Proactive Monitoring: Monitor system logs for kernel-related crashes or memory-related segmentation faults that may indicate attempts to exploit driver-level vulnerabilities.

Compensating Controls: Restrict access to wireless network interfaces where possible and ensure that only trusted firmware images are utilized on ath6kl-based hardware.

Public Exploit Available: No

Organizations utilizing devices powered by the Linux kernel with ath6kl wireless components should prioritize applying the provided kernel patches. Because this vulnerability exists at the driver level and can be triggered without authentication, failing to patch leaves systems exposed to potential memory corruption and service interruption.