Linux Kernel ath5k Out-of-Bounds Write Vulnerability in EEPROM Read Function

A vulnerability allowing out-of-bounds writes has been identified in the Linux kernel's ath5k wireless driver. This issue arises in the 'ath5k_eeprom_read_pcal_info_5111' function, where the index can exceed the expected range, leading to memory corruption. The vulnerability was discovered through fuzzing, which revealed that when certain conditions are met, the index can go beyond the limit of available data curves, causing a write operation to an invalid memory address. This out-of-bounds write could be exploited to manipulate memory, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability causes a slab-out-of-bounds memory write, which can lead to memory corruption and potentially allow for arbitrary code execution.