CVE-2024-57989: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix NULL deref check in mt7925changeviflinks
In mt7925changeviflinks() devmkzalloc() may return NULL but this returned value is not checked.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.13-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57989?
CVE-2024-57989 is a moderate severity vulnerability in the Linux kernel affecting the mt7925 driver.
How do I fix CVE-2024-57989?
To fix CVE-2024-57989, update your Linux kernel to version 6.13.2 or later, or version 6.12.13 or later.
Which systems are affected by CVE-2024-57989?
CVE-2024-57989 affects various versions of the Linux kernel, specifically versions between 6.11 and 6.12.13 and 6.13 and 6.13.2.
What does CVE-2024-57989 exploit?
CVE-2024-57989 exploits a potential NULL dereference in the mt7925 driver within the Linux kernel.
When was CVE-2024-57989 disclosed?
CVE-2024-57989 was disclosed alongside the fix in a patch release for the Linux kernel.