CVE-2023-7042: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-7042 is a null pointer dereference vulnerability discovered in the Linux kernel's Atheros 802.11ac wireless driver, specifically in the ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() function located in drivers/net/wireless/ath/ath10k/wmi-tlv.c. The vulnerability was disclosed on December 21, 2023 (NVD, Debian).

The vulnerability occurs when the WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT tlv is not present before being accessed in the ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() function, leading to a null pointer dereference. The issue was introduced in commit dc405152bb64 ("ath10k: handle mgmt tx completion event"). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium) with vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

This vulnerability can be exploited to trigger a denial of service condition in affected systems. The impact is limited to availability, with no direct impact on confidentiality or integrity of the system (NVD, Ubuntu).

The vulnerability requires local access with low privileges to exploit. There are no known reports of this vulnerability being exploited in the wild (NVD).

A fix has been developed and merged into the Linux kernel. The patch adds a check to verify whether the WMI_TLV_TAG_STRUCT_MGMT_TX_COMPL_EVENT tlv is present before accessing it. The fix has been backported to various Linux distributions including Fedora, Ubuntu, and Debian (Kernel Patch).