Linux Kernel ath12k Destination Ring Invalid Entry Fetch Vulnerability

A vulnerability in the Linux kernel's ath12k wireless driver has been addressed, which involved an incorrect fetching of entries from the destination ring in the 'ath12k_dp_mon_srng_process' function. The issue arose because the function used to retrieve the next entry was meant for source rings, leading to potential data corruption or crashes by accessing incorrect memory locations. This vulnerability was due to the different handling mechanisms of source and destination rings, where the wrong function call resulted in improper pointer arithmetic and ring management.

Impact

The vulnerability could cause data corruption or system crashes by accessing incorrect memory locations, leading to potential instability or erroneous behavior in the system.