Linux Kernel iwlwifi Driver Vulnerability Allowing Buffer Overread

A vulnerability in the Linux kernel's iwlwifi wireless driver can lead to a buffer overread. The issue arises because the driver does not ensure that strings read from firmware files are properly null-terminated. This lack of validation can cause the driver to read beyond the intended boundaries of the data, potentially accessing memory beyond the end of the file buffer. The vulnerability has been addressed by restricting the print format to align with the available buffer size.

Impact

Exploitation of this vulnerability can result in reading data beyond the allocated buffer, which may lead to memory corruption or unauthorized access to sensitive information.