CVE-2025-38009 wifi: mt76: disable napi on driver removal

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df8403b "net: warn if NAPI instance wasn't shut down". Disable tx napi before deleting it in mt76dmacleanup. WARNING: CPU:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: disabling NAPI during driver removal A warning regarding driver removal began to appear after the commit 9dd05df8403b „net: warn if NAPI instance wasn’t shut down”. The Tx NAPI should be disabled before deleting the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7915: Fixed nullptrderef in mt7915mmiowedinit The devmioremap function returns NULL upon error. Currently, mt7915mmiowedinit does not check for this case, resulting in a NULL pointer dereference. Fixed the issue by...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: Wifi: mt76: mt7996: Fixed nullptrderef in mt7996mmiowedinit The devmioremap function returns NULL upon error. Currently, mt7996mmiowedinit does not check for this case, resulting in a NULL pointer dereference. This issue has been...

CLSA-2025-1749568993 kernel: Fix of 24 CVEs

vsock: Keep the binding until socket destruction CVE-2025-21756 - mt76: fix use-after-free by removing a non-RCU wcid pointer CVE-2022-49328 - bpf, testrun: Fix alignment problem in bpfprogtestrunskb CVE-2022-49840 - ASoC: core: Fix use-after-free in sndsocexit CVE-2022-49842 - net: sched: Fix...

Vulnerability of the mt7921pci_suspend() function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – This driver provides support for wireless communication adapters in the Linux operating system. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the mt7921pcisuspend function in the drivers/net/wireless/mediatek/mt76/mt7921/pci.c module – The driver for supporting wireless connection adapters in the Linux operating system contains errors in its code. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2025-30864

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability exists in the Linux kernel related to the mt76/mt7925 driver. Specifically, a NULL pointer dereference can occur in the mt7925 sta set decap offload function when the...

PT-2025-25784

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-rc4 Description A warning on driver removal started occurring after a commit change. The issue is resolved by disabling tx napi before deleting it in mt76 dma cleanup. The problem was found by Linux...

SUSE CVE-2023-53086

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do not check it for usb or sdio devices. This patch fixes the crash reported below: 21.946627 wlp0s3u1i3: authenticate wi...

DEBIAN-CVE-2023-53086

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do not check it for usb or sdio devices. This patch fixes the crash reported below: 21.946627 wlp0s3u1i3: authenticate wi...

CVE-2023-53071

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76unregisterdevice on unregistered hw Trying to probe a mt7921e pci card without firmware results in a successful probe where ieee80211registerhw hasn't been called. When removing the driver,...

UBUNTU-CVE-2023-53071

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76unregisterdevice on unregistered hw Trying to probe a mt7921e pci card without firmware results in a successful probe where ieee80211registerhw hasn't been called. When removing the driver,...

UBUNTU-CVE-2023-53086

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do not check it for usb or sdio devices. This patch fixes the crash reported below: 21.946627 wlp0s3u1i3: authenticate wi...

CVE-2023-53071

CVE-2023-53071 affects the Linux kernel WiFi driver mt76. The root cause was calling ieee80211_unregister_hw unconditionally when probing a mt7921e PCI card without firmware, which could lead to a NULL pointer dereference on driver removal. The fix ensures mt76_unregister_device is invoked only f...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mt76 driver running mt76unregisterdevice on unregistered hardware...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a crash caused by the mt76 driver checking the WED status for non-mmio devices...

OESA-2025-1433 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sndprotoprobe The devicenode pointer is returned by ofparsephandle with refcount incremented. We should use ofnodeput on it wh...

Vulnerability of the mt76_sta_pre_rcu_remove() function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – A driver for supporting Mediatek wireless adapter devices in Linux kernel. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mt76staprercuremove function in the drivers/net/wireless/mediatek/mt76/mac80211.c module – the driver for supporting Mediatek wireless adapter devices in Linux kernel – stems from the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the function mt7996_mcu_get_temperature() in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mt7996mcugettemperature function in the drivers/net/wireless/mediatek/mt76/mt7996/mcu.c module of the Linux operating system is related to a resource leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __mt76_connac_mcu_alloc_sta_req() function in the drivers/net/wireless/mediatek/mt76/mt76_connac_mcu.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mt76connacmcuallocstareq function in the drivers/net/wireless/mediatek/mt76/mt76connacmcu.c module of the Linux kernel is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...