PT-2025-30864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to the mt76/mt7925 driver. Specifically, a NULL pointer dereference can occur in the mt7925 sta set decap offload function when the...

CVE-2023-53071

CVE-2023-53071 affects the Linux kernel WiFi driver mt76. The root cause was calling ieee80211_unregister_hw unconditionally when probing a mt7921e PCI card without firmware, which could lead to a NULL pointer dereference on driver removal. The fix ensures mt76_unregister_device is invoked only f...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mt76 driver running mt76unregisterdevice on unregistered hardware...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a crash caused by the mt76 driver checking the WED status for non-mmio devices...

OESA-2025-1433 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sndprotoprobe The devicenode pointer is returned by ofparsephandle with refcount incremented. We should use ofnodeput on it wh...

Vulnerability of the mt76_sta_pre_rcu_remove() function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – A driver for supporting Mediatek wireless adapter devices in Linux kernel. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt76staprercuremove function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – the driver for supporting Mediatek wireless adapter devices in Linux kernel – stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the function mt7996_mcu_get_temperature() in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7996mcugettemperature function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2022-49479

In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing tx activity can lead to a skb getting added to the status tracking idr after that idr has already been cleaned up, whic...

CVE-2024-57990

CVE-2024-57990 refers to a Linux kernel vulnerability in the wireless stack, specifically the MT7925 driver within the MT76/mt7925 code path. The root cause is an off-by-one error in the mt7925_load_clc() path that allowed an out-of-bounds read/write due to a comparison that used ‘>’ where ‘&g...

CVE-2024-57990 wifi: mt76: mt7925: fix off by one in mt7925_load_clc()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925loadclc This comparison should be = instead of to prevent an out of bounds read and write...

CVE-2024-57989

CVE-2024-57989 : In the Linux kernel, the wifi driver for mt76 mt7925 had a NULL pointer dereference in mt7925_change_vif_links because devm_kzalloc() could return NULL and its result was not checked. The vulnerability is described as a local, low-privilege issue with high potential impact to ava...

UBUNTU-CVE-2022-49479

In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing tx activity can lead to a skb getting added to the status tracking idr after that idr has already been cleaned up, whic...

UBUNTU-CVE-2022-49476

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel crash at mt7921pciremove The crash log shown it is possible that mt7921irqhandler is called while devmfreeirq is being handled so mt76freedevice need to be postponed until devmfreeirq is completed to solv...

CVE-2022-49112

In the Linux kernel, the following vulnerability has been resolved: mt76: fix monitor mode crash with sdio driver mt7921s driver may receive frames with fragment buffers. If there is a CTS packet received in monitor mode, the payload is 10 bytes only and need 6 bytes header padding after RXD...

CVE-2022-49328 mt76: fix use-after-free by removing a non-RCU wcid pointer

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76txqschedule by protecting mtxq-wcid with rculock between mt76txqschedule and stainfoalloc, free. 18853.876689...

CVE-2022-49225 mt76: mt7921s: fix a possible memory leak in mt7921_load_patch

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921s: fix a possible memory leak in mt7921loadpatch Always release fw data at the end of mt7921loadpatch routine...

CVE-2022-49112

CVE-2022-49112 is a Linux kernel issue described in the provided docs as a fix for a monitor-mode crash involving the mt76/mt7921s stack. The problem arises when a CTS packet in monitor mode could cause improper skb handling due to only the first RXD buffer being linear; pulling RXD-size+6 bytes ...

CVE-2022-49112 mt76: fix monitor mode crash with sdio driver

In the Linux kernel, the following vulnerability has been resolved: mt76: fix monitor mode crash with sdio driver mt7921s driver may receive frames with fragment buffers. If there is a CTS packet received in monitor mode, the payload is 10 bytes only and need 6 bytes header padding after RXD...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible crash when the mt76 driver receives CTS packets in monitor mode...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse contention condition related to tx state in mt76...