GSD-2023-1000804 wifi: ath11k: fix firmware assert during bandwidth change for peer sta
A firmware assert in the ath11k WiFi driver can cause a denial of service during bandwidth changes, affecting Linux kernel users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is GSD-2023-1000804?
GSD-2023-1000804 is a denial of service vulnerability in Kernel, published on 17 Jan 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
wifi: ath11k: fix firmware assert during bandwidth change for peer sta
This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit 3526f31233e22a21cfd095bb8c89c2fab01e3bbe, it was introduced in version v5.17 by commit f187fe8e3bc65cc4d7b0916947e2d6cd65d9cd3a. For more details please see the references link.
Which versions are affected by GSD-2023-1000804?
1 open source package ship an affected version, including Kernel.
| Package | Affected | Fixed in |
|---|---|---|
Kernel Linux | All versions | None |
How do I fix GSD-2023-1000804?
No fix has been published for GSD-2023-1000804 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is GSD-2023-1000804 being exploited?
There is no known exploitation of GSD-2023-1000804 in the wild and no public exploit code.