CVE-2024-58014: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58014 affects the Linux kernel's brcmsmac WiFi driver component. The vulnerability was discovered by the Linux Verification Center (linuxtesting.org) using their SVACE tool and was disclosed in December 2024. The issue specifically involves a potential out-of-bounds access in the 'wlc_phy_iqcal_gainparams_nphy()' function of the Broadcom 802.11n PHY layer implementation (Kernel Commit).

The vulnerability exists in the 'wlc_phy_iqcal_gainparams_nphy()' function within the Linux kernel's brcmsmac driver, specifically in the PHY layer implementation for Broadcom 802.11n devices. The issue involves a potential out-of-bounds access to the 'tbl_iqcal_gainparams_nphy' array when the gain parameter check is not properly implemented (Kernel Commit).

The vulnerability could potentially lead to out-of-bounds memory access in the Linux kernel's WiFi driver component, which might affect systems using the Broadcom brcmsmac WiFi driver (NVD).

A patch has been developed and merged into the Linux kernel that adds a gain range check using WARN() to prevent the potential out-of-bounds access. The fix has been backported to multiple stable kernel versions (Kernel Commit).