In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921e: fix use-after-free in free_irq()
From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For this case, let's apply MT76_REMOVED flag to indicate the device was removed and do not run into the resource access anymore.
BUG: KASAN: use-after-free in mt7921_irq_handler+0xd8/0x100 [mt7921e] Read of size 8 at addr ffff88824a7d3b78 by task rmmod/11115 CPU: 28 PID: 11115 Comm: rmmod Tainted: G W L 5.17.0 #10 Hardware name: Micro-Star International Co., Ltd. MS-7D73/MPG B650I EDGE WIFI (MS-7D73), BIOS 1.81 01/05/2024 Call Trace: <TASK> dump_stack_lvl+0x6f/0xa0 print_address_description.constprop.0+0x1f/0x190 ? mt7921_irq_handler+0xd8/0x100 [mt7921e] ? mt7921_irq_handler+0xd8/0x100 [mt7921e] kasan_report.cold+0x7f/0x11b ? mt7921_irq_handler+0xd8/0x100 [mt7921e] mt7921_irq_handler+0xd8/0x100 [mt7921e] free_irq+0x627/0xaa0 devm_free_irq+0x94/0xd0 ? devm_request_any_context_irq+0x160/0x160 ? kobject_put+0x18d/0x4a0 mt7921_pci_remove+0x153/0x190 [mt7921e] pci_device_remove+0xa2/0x1d0 __device_release_driver+0x346/0x6e0 driver_detach+0x1ef/0x2c0 bus_remove_driver+0xe7/0x2d0 ? __check_object_size+0x57/0x310 pci_unregister_driver+0x26/0x250 __do_sys_delete_module+0x307/0x510 ? free_module+0x6a0/0x6a0 ? fpregs_assert_state_consistent+0x4b/0xb0 ? rcu_read_lock_sched_held+0x10/0x70 ? syscall_enter_from_user_mode+0x20/0x70 ? trace_hardirqs_on+0x1c/0x130 do_syscall_64+0x5c/0x80 ? trace_hardirqs_on_prepare+0x72/0x160 ? do_syscall_64+0x68/0x80 ? trace_hardirqs_on_prepare+0x72/0x160 entry_SYSCALL_64_after_hwframe+0x44/0xae
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-core | Jun 6, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headers | Jun 17, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-syms | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-generic-64k | Jul 1, 2024 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub