kernel: Linux kernel: Denial of Service in mt7921e driver during module unload

A flaw was discovered in the mt76/mt7921e Wi-Fi driver in the Linux kernel where improper handling of driver data during module removal can lead to a crash. Under certain insmod/rmmod stress test conditions, the driver’s mt7921pciremove function is called while the associated mt76dev driver priva...

PT-2023-3341

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use-after-free flaw was found in the mt7921 check offload capability function in the wifi mt76/mt7921 sub-component. This issue could allow an attacker to crash the system after...

SUSE CVE-2020-12465

An array overflow was discovered in mt76addfragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID-b102f0c522cf. An oversized packet with too many rx fragments can corrupt memory of adjacent pages...

PT-2023-36597

Уязвимость функции mt7996 mcu exit модуля drivers/net/wireless/mediatek/mt76/mt7996/mcu.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с неосвобождением ресурса после истечения действительного срока его эксплуатирования. Эксплуатация уязвимости может...

PT-2023-36781

Уязвимость функции mt7921 acpi read модуля drivers/net/wireless/mediatek/mt76/mt7921/acpi sar.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

GSD-2023-1000980 wifi: mt76: do not run mt76u_status_worker if the device is not running

wifi: mt76: do not run mt76ustatusworker if the device is not running This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit...

GSD-2023-1000742 mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

GSD-2023-1000539 wifi: mt76: do not run mt76u_status_worker if the device is not running

wifi: mt76: do not run mt76ustatusworker if the device is not running This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2025-38449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was resolved in the mt76 dma tx cleanup routine within the Linux kernel’s Wi-Fi subsystem. The fix addresses a memory leak that occurred during device unregistration and...

PT-2025-43083

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a resource leak in the mt7915 rate txpower get function within the mt76 and mt7915 modules. The issue involves a variable, buf, going out of scope, leading to a...

PT-2022-38115

Уязвимость функции mt7915 rate txpower get модуля drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с утечкой памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2022-38029

Уязвимость функции mt76x0 phy get target power модуля drivers/net/wireless/mediatek/mt76/mt76x0/phy.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с чтением за границами буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...

kernel: mt76: mt7921: fix crash when startup fails.

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix crash when startup fails. If the nic fails to start, it is possible that the resetwork has already been scheduled. Ensure the work item is canceled so we do not have use-after-free crash in case cleanup is calle...

GSD-2022-1006856 wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()

wifi: mt76: mt7921: fix use after free in mt7921acpiread This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...

GSD-2022-1006672 wifi: mt76: mt7921e: fix random fw download fail

wifi: mt76: mt7921e: fix random fw download fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

GSD-2022-1006364 wifi: mt76: mt7921e: fix crash in chip reset fail

wifi: mt76: mt7921e: fix crash in chip reset fail This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.9 by commit...

PT-2022-37837

Уязвимость функции mt7921 acpi read модуля drivers/net/wireless/mediatek/mt76/mt7921/acpi sar.c драйвера адаптеров беспроводной связи Mediatek ядра операционной системы Linux связана с повторным использованием ранее освобожденной памяти. Эксплуатация уязвимости может позволить нарушителю получить...

GSD-2022-1003092 mt76: fix tx status related use-after-free race on station removal

mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002922 mt76: fix use-after-free by removing a non-RCU wcid pointer

mt76: fix use-after-free by removing a non-RCU wcid pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002761 mt76: fix tx status related use-after-free race on station removal

mt76: fix tx status related use-after-free race on station removal This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...