Fedora Account System
Red Hat Associate
Red Hat Customer
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cleanup, during error handling path of ath12k_dp_rx_peer_frag_setup(). This could lead to out-of-bounds access in peer->rx_tid[]. Hence, add a decrement operation for TID, before peer cleanup to ensures proper cleanup and prevents out-of-bounds access issues when the RX peer frag setup fails. Found during code review. Compile tested only.
This comment was flagged as spam, view the edit history to see the original text if required.
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2025:17377 https://access.redhat.com/errata/RHSA-2025:17377
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2025:17776 https://access.redhat.com/errata/RHSA-2025:17776