CVE-2024-53156

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11.0-rc6

Description The issue is related to insufficient verification of conn rsp epid in the htc connect service() function, leading to an array-index-out-of-bounds error. This can cause a denial of service. The error occurs when the index 255 is out of range for the type htc endpoint [22].

Recommendations To resolve the issue, apply the patch that adds a range check for conn rsp epid in htc connect service(). As a temporary workaround, consider restricting access to the vulnerable ath9k driver until the patch is applied.