CVE-2023-7042: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-7042 is a null pointer dereference vulnerability discovered in the Linux kernel's Atheros 802.11ac wireless driver, specifically in the ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() function located in drivers/net/wireless/ath/ath10k/wmi-tlv.c. The vulnerability was disclosed on December 21, 2023 (NVD, Debian).

The vulnerability occurs when the WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT tlv is not present before being accessed in the ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() function, leading to a null pointer dereference. The issue was introduced in commit dc405152bb64 ("ath10k: handle mgmt tx completion event"). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

This vulnerability can be exploited to trigger a denial of service condition in affected systems. The impact is limited to availability, with no direct impact on confidentiality or integrity of the system (NVD, Ubuntu).

A fix has been developed and merged into the Linux kernel. The patch adds a check to verify whether the WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT tlv is present before accessing it. The fix has been backported to various Linux distributions including Fedora, Ubuntu, and Debian (Kernel Patch).