In the Linux kernel, the following vulnerability has been resolved:
mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
Fix the following NULL pointer dereference in mt7915_get_phy_mode routine adding an ibss interface to the mt7915 driver.
[ 101.137097] wlan0: Trigger new scan to find an IBSS to join [ 102.827039] wlan0: Creating new IBSS network, BSSID 26:a4:50:1a:6e:69 [ 103.064756] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 103.073670] Mem abort info: [ 103.076520] ESR = 0x96000005 [ 103.079614] EC = 0x25: DABT (current EL), IL = 32 bits [ 103.084934] SET = 0, FnV = 0 [ 103.088042] EA = 0, S1PTW = 0 [ 103.091215] Data abort info: [ 103.094104] ISV = 0, ISS = 0x00000005 [ 103.098041] CM = 0, WnR = 0 [ 103.101044] user pgtable: 4k pages, 39-bit VAs, pgdp=00000000460b1000 [ 103.107565] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 [ 103.116590] Internal error: Oops: 96000005 [#1] SMP [ 103.189066] CPU: 1 PID: 333 Comm: kworker/u4:3 Not tainted 5.10.75 #0 [ 103.195498] Hardware name: MediaTek MT7622 RFB1 board (DT) [ 103.201124] Workqueue: phy0 ieee80211_iface_work [mac80211] [ 103.206695] pstate: 20000005 (nzCv daif -PAN -UAO -TCO BTYPE=--) [ 103.212705] pc : mt7915_get_phy_mode+0x68/0x120 [mt7915e] [ 103.218103] lr : mt7915_mcu_add_bss_info+0x11c/0x760 [mt7915e] [ 103.223927] sp : ffffffc011cdb9e0 [ 103.227235] x29: ffffffc011cdb9e0 x28: ffffff8006563098 [ 103.232545] x27: ffffff8005f4da22 x26: ffffff800685ac40 [ 103.237855] x25: 0000000000000001 x24: 000000000000011f [ 103.243165] x23: ffffff8005f4e260 x22: ffffff8006567918 [ 103.248475] x21: ffffff8005f4df80 x20: ffffff800685ac58 [ 103.253785] x19: ffffff8006744400 x18: 0000000000000000 [ 103.259094] x17: 0000000000000000 x16: 0000000000000001 [ 103.264403] x15: 000899c3a2d9d2e4 x14: 000899bdc3c3a1c8 [ 103.269713] x13: 0000000000000000 x12: 0000000000000000 [ 103.275024] x11: ffffffc010e30c20 x10: 0000000000000000 [ 103.280333] x9 : 0000000000000050 x8 : ffffff8006567d88 [ 103.285642] x7 : ffffff8006563b5c x6 : ffffff8006563b44 [ 103.290952] x5 : 0000000000000002 x4 : 0000000000000001 [ 103.296262] x3 : 0000000000000001 x2 : 0000000000000001 [ 103.301572] x1 : 0000000000000000 x0 : 0000000000000011 [ 103.306882] Call trace: [ 103.309328] mt7915_get_phy_mode+0x68/0x120 [mt7915e] [ 103.314378] mt7915_bss_info_changed+0x198/0x200 [mt7915e] [ 103.319941] ieee80211_bss_info_change_notify+0x128/0x290 [mac80211] [ 103.326360] __ieee80211_sta_join_ibss+0x308/0x6c4 [mac80211] [ 103.332171] ieee80211_sta_create_ibss+0x8c/0x10c [mac80211] [ 103.337895] ieee80211_ibss_work+0x3dc/0x614 [mac80211] [ 103.343185] ieee80211_iface_work+0x388/0x3f0 [mac80211] [ 103.348495] process_one_work+0x288/0x690 [ 103.352499] worker_thread+0x70/0x464 [ 103.356157] kthread+0x144/0x150 [ 103.359380] ret_from_fork+0x10/0x18 [ 103.362952] Code: 394008c3 52800220 394000e4 7100007f (39400023)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-preemptUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub