PT-2024-10207 · Linux+9 · Linux Kernel+9
Jeongjun Park
·
Published
2024-09-14
·
Updated
2025-11-18
·
CVE-2024-53156
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.11.0-rc6
Description
The issue is related to insufficient verification of
conn rsp epid in the htc connect service() function, leading to an array-index-out-of-bounds error. This can cause a denial of service. The error occurs when the index 255 is out of range for the type htc endpoint [22].Recommendations
To resolve the issue, apply the patch that adds a range check for
conn rsp epid in htc connect service(). As a temporary workaround, consider restricting access to the vulnerable ath9k driver until the patch is applied.Exploit
Fix
LPE
RCE
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu
Ath9K