A high-severity memory disclosure vulnerability in the Linux kernel ath6kl Wi-Fi driver could allow an adjacent attacker to access sensitive information from system memory.

The vulnerability exists in the ath6kl_cfg80211_connect_event function, which fails to properly bound association request and response lengths before performing subtractions. An unauthenticated attacker within proximity can trigger an integer underflow, causing the kernel to treat a wrapped length value as valid and copy adjacent slab memory to user space.

Successful exploitation allows for the unauthorized disclosure of kernel memory, which may contain sensitive data such as cryptographic keys, credentials, or session identifiers. Given the CVSS score of 8.1, this vulnerability poses a significant risk to data confidentiality and system integrity, as it facilitates information gathering that could be used to support further, more destructive attacks.

Immediate Action: Update the Linux kernel to version 6.12.109, 6.18.50, 7.2.4, or later, as provided by your distribution vendor. If an immediate kernel update is not feasible, restrict access to the affected wireless hardware where possible.

Proactive Monitoring: Monitor system logs for unusual kernel crashes or memory-related errors associated with wireless networking drivers. Review network traffic for anomalous Wi-Fi association requests that may indicate an exploitation attempt.

Compensating Controls: Ensure that systems using the affected ath6kl driver are isolated from untrusted wireless networks. Implement kernel-level protections such as KASLR to increase the difficulty of exploiting memory disclosure flaws.

Public Exploit Available: No — there is no confirmed public exploit available.

This vulnerability represents a significant risk to systems utilizing the ath6kl wireless driver, as it directly impacts memory confidentiality. Security teams should prioritize patching the kernel to the versions specified in the enrichment data. Given the nature of kernel-level flaws, applying these updates as part of the standard patch management cycle is critical to maintaining a secure operating environment.