CVE-2024-46860: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix NULL pointer access in mt7921ipv6addrchange
When disabling wifi mt7921ipv6addrchange() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46860?
CVE-2024-46860 has been classified as a medium severity vulnerability due to the potential for NULL pointer dereference during the wifi disable process.
How do I fix CVE-2024-46860?
To resolve CVE-2024-46860, users should update their Linux kernel to version 6.12.11-1 or later.
Which versions of the Linux kernel are affected by CVE-2024-46860?
CVE-2024-46860 affects Linux kernel versions from 6.7 through 6.10.11 and specific release candidates of 6.11.
What component of the Linux kernel is impacted by CVE-2024-46860?
CVE-2024-46860 impacts the wifi driver for the mt76 chipset, specifically during IPv6 address changes.
Is CVE-2024-46860 a local or remote vulnerability?
CVE-2024-46860 is considered a local vulnerability as it requires local access to the device to exploit.