The Linux kernel contains an out-of-bounds read vulnerability in the ath11k driver, which could potentially lead to information disclosure or system instability.

The vulnerability exists within the ath11k_wmi_process_csa_switch_count_event function, where insufficient validation of TLV payload lengths and loop bounds allows for out-of-bounds memory access. This flaw can be triggered by a local attacker without specific privileges.

Successful exploitation of this vulnerability could result in the disclosure of sensitive kernel memory or cause a denial of service through system crashes. Given the CVSS score of 7.7, this is considered a high-severity issue that impacts the stability and security of the underlying infrastructure, particularly in environments utilizing ath11k-based wireless hardware.

Immediate Action: Update the Linux kernel to version 6.6.157, 6.12.110, 6.18.52, 7.2.6, or newer, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events that may correlate with Wi-Fi driver operations or abnormal firmware communication.

Compensating Controls: If patching is delayed, restrict physical or local access to systems utilizing ath11k wireless hardware to prevent unauthorized interaction with the driver.

Public Exploit Available: No (exploit_available: false)

This vulnerability highlights the risks associated with improper input validation in kernel-space drivers. Administrators should prioritize applying the provided kernel updates to all affected systems to remediate the risk of out-of-bounds memory access. Ensure that vendor-specific security patches are tracked and deployed through standard maintenance cycles to maintain kernel integrity.