92 matches found
CVE-2021-47031
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix memory leak in mt7921coredumpwork Fix possible memory leak in mt7921coredumpwork...
CVE-2021-47028
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...
kernel: Linux kernel: Memory leak in mt76 Wi-Fi driver leads to Denial of Service
A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A memory leak occurs when the mt7996mcuexit routine fails to properly clear memory queues if the mt7996firmwarestate encounters an issue. This vulnerability could allow a local attacker with low privileges to cause a Denial of Service DoS ...
kernel: wifi: mt76: do not run mt76_unregister_device() on unregistered hw
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76unregisterdevice on unregistered hw Trying to probe a mt7921e pci card without firmware results in a successful probe where ieee80211registerhw hasn't been called. When removing the driver,...
kernel: Linux kernel: Memory leak in mt76 Wi-Fi driver leads to Denial of Service
A flaw was found in the Linux kernel's mt76 Wi-Fi driver. A memory leak occurs when the mt7996mcuexit routine fails to properly clear memory queues if the mt7996firmwarestate encounters an issue. This vulnerability could allow a local attacker with low privileges to cause a Denial of Service DoS ...
The vulnerability of the mt7921_check_offload_capability() function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the wireless device’s Linux kernel driver allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the mt7921checkoffloadcapability function in the drivers/net/wireless/mediatek/mt76/mt7921/init.c file of the wireless device mt7921 driver for the Linux operating system is related to the use of previously freed memory. Exploiting this vulnerability could allow an attacker t...
kernel: mt76: fix use-after-free by removing a non-RCU wcid pointer
A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure mtxq-wcid that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability,...
PT-2024-11132 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the mt76 driver, specifically the mt7615 component, where the first pointer in the txp needs to be unmapped to prevent DMA mapping entries from leaking...
kernel: buffer overflow in mt76_add_fragment function in drivers/net/wireless/mediatek/mt76/dma.c
A memory overflow and data corruption flaw were found in the Mediatek MT76 driver module for WiFi in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c. An oversized packet with too many rx fragments causes an overflow and corruption in memory of adjacent pages. A local attacker with a...
Linux kernel buffer overflow vulnerability (CNVD-2020-27235)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the mt76addfragment file in drivers/net/wireless/mediatek/mt76/dma.c in versions of Linux kernel prior to 5.5.10. An attacker can...
DEBIAN-CVE-2020-12465
An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages...
UBUNTU-CVE-2020-12465
An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages...