A memory corruption vulnerability in the Linux kernel ath12k wireless driver could allow a local attacker to trigger out-of-bounds reads, potentially leading to information disclosure or system instability.

This vulnerability occurs in the ath12k_wmi_process_csa_switch_count_event function, where insufficient validation of firmware data permits out-of-bounds memory access. The flaw allows a local, unauthenticated user to trigger memory overreads by manipulating the TLV payload and the num_vdevs loop parameter.

The vulnerability carries a CVSS score of 7.7, reflecting a high severity due to its potential for compromising system availability and data confidentiality. Successful exploitation could lead to unauthorized access to kernel memory, resulting in sensitive data exposure or a system crash, which disrupts business operations.

Immediate Action: Update the Linux kernel to version 7.2.6 or later, or apply the upstream patches referenced in the official kernel git repository.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the ath12k wireless driver.

Compensating Controls: Limit access to the physical system and restrict the ability of untrusted users to interact with wireless networking hardware where possible.

Public Exploit Available: Unknown

Given the potential for kernel-level impact, administrators should prioritize updating affected Linux distributions as soon as the relevant kernel packages become available. Applying these patches is essential to prevent local attackers from exploiting this memory safety flaw to compromise system integrity or stability.