CVE-2024-44997

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
04/09/2024
Last modified:
06/09/2024

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()<br /> <br /> When there are multiple ap interfaces on one band and with WED on,<br /> turning the interface down will cause a kernel panic on MT798X.<br /> <br /> Previously, cb_priv was freed in mtk_wed_setup_tc_block() without<br /> marking NULL,and mtk_wed_setup_tc_block_cb() didn&amp;#39;t check the value, too.<br /> <br /> Assign NULL after free cb_priv in mtk_wed_setup_tc_block() and check NULL<br /> in mtk_wed_setup_tc_block_cb().<br /> <br /> ----------<br /> Unable to handle kernel paging request at virtual address 0072460bca32b4f5<br /> Call trace:<br /> mtk_wed_setup_tc_block_cb+0x4/0x38<br /> 0xffffffc0794084bc<br /> tcf_block_playback_offloads+0x70/0x1e8<br /> tcf_block_unbind+0x6c/0xc8<br /> ...<br /> ---------

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.48 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.10.7 (excluding)
cpe:2.3:o:linux:linux_kernel:6.11:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.11:rc3:*:*:*:*:*:*