A high-severity out of bounds memory access vulnerability in the Linux kernel rtl8192du driver poses a risk of system instability and potential exploitation via adjacent network access.

The vulnerability resides in the rtl92du_tx_fill_desc function, which fails to validate the QoS TID index from 802.11 headers before accessing the sta_entry->tids array. An unauthenticated attacker within adjacent network range can trigger this out of bounds access, potentially leading to a denial of service or unexpected memory behavior.

The vulnerability carries a CVSS score of 7.6, reflecting its capacity for significant impact on system availability. Successful exploitation could result in kernel panics or system crashes, leading to service disruption for critical infrastructure relying on affected wireless hardware. While the attack vector is limited to the adjacent network, the potential for kernel-level impact warrants immediate attention to maintain system integrity.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or a later stable release where this issue has been resolved.

Proactive Monitoring: Monitor system logs for kernel oops or stability issues associated with the rtlwifi driver modules.

Compensating Controls: Restrict access to wireless network segments where possible and implement network-level ingress filtering to minimize the exposure of vulnerable wireless interfaces.

Public Exploit Available: No (exploit_available: false)

Given the potential for kernel-level memory corruption, administrators should prioritize patching the affected Linux kernel versions during the next maintenance window. While the attack requires proximity to the wireless network, the high severity of the flaw necessitates proactive updates to prevent potential service degradation or stability issues.