CVE-2025-40066: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links()
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: Check phy before init mstalink in mt7996macstaaddlinks()
In order to avoid a possible NULL pointer dereference in mt7996macstainitlink routine, move the phy pointer check before running mt7996macstainitlink() in mt7996macstaaddlinks routine.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2025-40066?
CVE-2025-40066 is a vulnerability in the Linux kernel affecting wifi driver mt76 that can lead to a NULL pointer dereference.
What is the severity of CVE-2025-40066?
The severity of CVE-2025-40066 has not been publicly rated, but it involves a potential Denial of Service due to application crash.
How do I fix CVE-2025-40066?
To fix CVE-2025-40066, update your Linux kernel to the latest stable version where this vulnerability has been patched.
Which software versions are affected by CVE-2025-40066?
CVE-2025-40066 affects the Linux kernel, specifically in the wifi driver for the mt76 hardware.
Is there a workaround for CVE-2025-40066?
Currently, there are no known workarounds for CVE-2025-40066, so updating the kernel is the recommended approach.