PT-2023-9195 · Linux+2 · Linux Kernel+2

Baochen Qiang · Published 2023-09-20 · Updated 2025-09-29 · CVE-2023-52827

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a possible out-of-bound read in the ath12k htt pull ppdu stats() function. The len value is extracted from an HTT message and could be an unexpected value in case of errors, potentially leading to an out-of-bound read. The same issue applies to ppdu info->ppdu stats.common.num users. Validation has been added to prevent this issue. The problem was discovered during a code review.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-14046

AZL-42234

BDU:2024-04539

CVE-2023-52827

SUSE-SU-2024:2571-1

SUSE-SU-2024:2896-1

SUSE-SU-2024:2973-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

Affected Products

Alt Linux

Linux Kernel

Suse

References · 1927

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52827.json · Exploit
• https://ubuntu.com/security/CVE-2023-52827 · Vendor Advisory
• https://git.kernel.org/stable/c/79527c21a3ce04cffc35ea54f74ee087e532be57 · Patch
• https://bdu.fstec.ru/vul/2024-04539 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20028-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-42234 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2973-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52827 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2571-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2896-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52827 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20008-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52827 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52827 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52827 · Vendor Advisory