Linux Kernel ath12k Destination Ring Invalid Entry Fetch Vulnerability

A vulnerability in the Linux kernel's ath12k Wi-Fi driver has been addressed, which involved an incorrect fetch of entries from the destination ring in the 'ath12k_dp_mon_srng_process' function. The issue arose because the function used to retrieve entries was meant for source rings, leading to potential data corruption or crashes by accessing incorrect memory locations. This vulnerability was caused by a mismatch in handling mechanisms between source and destination rings, resulting in erroneous pointer arithmetic and ring management. The flaw has been fixed by replacing the incorrect function call with one that properly handles destination rings.

Impact

The vulnerability could lead to data corruption or system crashes by allowing the driver to access incorrect memory locations.