In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
When there are multiple ap interfaces on one band and with WED on, turning the interface down will cause a kernel panic on MT798X.
Previously, cb_priv was freed in mtk_wed_setup_tc_block() without marking NULL,and mtk_wed_setup_tc_block_cb() didn't check the value, too.
Assign NULL after free cb_priv in mtk_wed_setup_tc_block() and check NULL in mtk_wed_setup_tc_block_cb().
---------- Unable to handle kernel paging request at virtual address 0072460bca32b4f5 Call trace: mtk_wed_setup_tc_block_cb+0x4/0x38 0xffffffc0794084bc tcf_block_playback_offloads+0x70/0x1e8 tcf_block_unbind+0x6c/0xc8 ... ---------
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dlm-kmp-default | Dec 5, 2025 | Oct 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub