The ath5k wireless driver performs an array‑index out‑of‑bounds write: the index 4 is written into a four‑element array, overwriting the following buffer member. The write alters a status field (ack_signal) but does not trigger a denial of service or obvious information leakage. Because the driver runs in kernel space, the flaw constitutes a memory corruption condition that could theoretically be manipulated with crafted wireless frames, although no proven exploit currently exists. The security impact is limited to potential data integrity issues within the driver’s state structures.

Affected systems are all Linux distributions that ship a kernel containing the ath5k driver. The vulnerability is present in any build that has not applied the commit that adds a bounds check before the write. No specific kernel version range is listed, so all kernels prior to the fixed release are susceptible.

The CVSS score is not supplied and the EPSS score is unavailable, indicating that exploitation likelihood is unknown but likely low. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack requires local or remote control of the wireless traffic processed by the ath5k driver; an attacker would need to craft frames that trigger the out‑of‑bounds write. In the absence of a public exploit, the risk is considered moderate but not critical.