A critical out of bounds read vulnerability in the Linux kernel wcn36xx driver could allow an attacker to read stale heap memory, leading to potential information disclosure or system instability.

The wcn36xx driver fails to verify that the firmware response length matches the required size for candidate data, leading to an out of bounds read of stale heap memory. This flaw can be triggered by an unauthenticated attacker within proximity (adjacent network) who is capable of influencing the firmware response.

Successful exploitation of this vulnerability could result in the disclosure of sensitive data residing in kernel memory or cause the system to crash, leading to service disruption. Given the CVSS score of 8.8, this vulnerability represents a high risk to availability and confidentiality. While the attack requires adjacent network access, the potential for kernel level memory corruption poses a significant threat to overall system integrity.

Immediate Action: Update the Linux kernel to version 6.1.178, 6.6.145, 6.12.97, 6.18.40, or a newer stable release containing the upstream patches.

Proactive Monitoring: Monitor system logs for kernel panics or unexplained driver errors associated with the wcn36xx module which may indicate attempted exploitation.

Compensating Controls: Restrict access to wireless network management interfaces and isolate affected hardware from untrusted network segments to mitigate the risk of adjacent access.

Public Exploit Available: exploit_available (unknown)

This vulnerability presents a high risk due to the potential for kernel memory corruption. Administrators are urged to prioritize updating their Linux kernel environments to the specified fixed versions to ensure the integrity and stability of the system. If immediate patching is not feasible, restrict network access to the affected devices to minimize the attack surface.