A flaw in the Linux kernel ath12k driver may allow an adjacent attacker to trigger an out-of-bounds memory operation, posing a significant risk to system stability and integrity.

This is an out-of-bounds memory access vulnerability involving the free_ml_peer_id_map bitmap. The vulnerability is triggered by an unauthenticated adjacent attacker who can influence the peer ID slot clearing process within the wireless driver.

Successful exploitation of this memory corruption vulnerability could lead to a system crash, resulting in denial of service for critical wireless network infrastructure. Given the high CVSS score of 8.8, the potential for arbitrary code execution or privilege escalation cannot be ruled out, which could jeopardize the confidentiality and integrity of data processed by the affected system.

Immediate Action: Update the Linux kernel to version 7.1.8 or later to incorporate the upstream fix.

Proactive Monitoring: Monitor system logs for kernel panics or driver-specific error messages associated with the ath12k module.

Compensating Controls: Restrict access to the wireless network environment to trusted devices to minimize the attack surface for adjacent network-based exploits.

Public Exploit Available: No

This vulnerability represents a significant risk to kernel stability and system security. Administrators should prioritize patching the Linux kernel to version 7.1.8 as soon as possible to neutralize this memory corruption risk.