Security readout for executives and security teams
Plain-English summary
This Linux kernel flaw can cause an out-of-bounds write in the ath12k Wi-Fi driver when it processes unexpected regulatory capability data. The main business risk is system crash or denial of service on affected Linux systems using this driver, not data theft based on the provided CVSS and sources.
Executive priority
Treat this as a moderate availability risk. It is not currently supported as actively exploited, but kernel flaws can be operationally disruptive. Patch during the next appropriate maintenance cycle, with earlier action for laptops, appliances, or servers that rely on ath12k Wi-Fi.
Technical view
CVE-2023-52829 is a CWE-787 out-of-bounds write in ath12k_wmi_ext_hal_reg_caps(). reg_cap.phy_id comes from a WMI event and was used without validation to index soc->hal_reg_cap. The kernel fix validates phy_id before use. CVSS 3.1 is 6.2, AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Likely exposure
Exposure is most likely on Linux systems running affected kernel versions with the ath12k Qualcomm Wi-Fi driver present or enabled. The source lists Linux kernel 6.3 through affected stable ranges including 6.5.13, 6.6.3, and 6.7 context, but distro backports may change practical exposure.
Exploitation context
No active exploitation is supported by the provided sources. KEV is false. The vulnerability was found during code review, and the source notes compile testing only. No public exploit details or weaponized guidance are included in the bundle.
Researcher notes
The evidence points to an input-validation defect in a WMI event path, not a documented remote attack chain. The provided sources do not identify exploitability beyond the CVSS local availability impact. Practical assessment should focus on kernel build, driver presence, hardware dependency, and whether the stable validation patch is present.
Mitigation direction
- Update to a vendor kernel containing the referenced stable fixes or equivalent backport.
- Prioritize Linux assets using Qualcomm ath12k Wi-Fi hardware or loading the ath12k driver.
- Check Linux distribution advisories for exact fixed package versions.
- If patching is delayed, follow vendor guidance for temporary risk reduction.
- Avoid assuming a source-built kernel is fixed without confirming the specific commit or backport.
Validation and detection
- Inventory kernel versions and identify systems in the affected Linux 6.3 to 6.7 range.
- Check whether ath12k support is built, loaded, or required on each system.
- Confirm the kernel includes the phy_id validation fix or a distro-equivalent backport.
- Review distro changelogs against the referenced stable kernel commits.
- Track remaining affected systems through normal vulnerability management exceptions.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-787: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-52829 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.2 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H2.53.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
6.2MediumVector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/dfe13eaab043130f90dd3d57c7d88577c04adc97CVE reference, Linux
- https://git.kernel.org/stable/c/4dd0547e8b45faf6f95373be5436b66cde326c0eCVE reference, Linux
- https://git.kernel.org/stable/c/b302dce3d9edea5b93d1902a541684a967f3c63cCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Out-of-bounds Write
Out-of-bounds Write represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.