CVE-2024-58015: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-58015 affects the Linux kernel's ath12k WiFi driver. The vulnerability was discovered through a Coverity scan (CIDs 1600742 and 1600758) and was disclosed on February 26, 2025. The issue involves an out-of-bounds access error in the selfgen stats buffer handling within the ath12k driver (NVD, Kernel Commit).

The vulnerability occurs in the printarraytobufindex() function where array length parameters passed to the function are too large, potentially causing out-of-bounds memory access. The issue specifically affects the handling of AC and AX MU-MIMO statistics in the ath12k driver's debugfs interface. The fix involves decreasing the buffer size by one to correct the faulty upper bound of the passed array (Kernel Commit).

The vulnerability could potentially lead to out-of-bounds memory access in the Linux kernel's ath12k WiFi driver, which might result in system instability or potential security implications when accessing debugfs statistics (NVD).

A patch has been developed and committed to the Linux kernel that fixes the issue by adjusting the buffer size calculations in the affected functions. Users should update their Linux kernel to a version that includes this fix (Kernel Commit).