CVE-2021-47032 mt76: mt7915: fix tx skb dma unmap

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix tx skb dma unmap The first pointer in the txp needs to be unmapped as well, otherwise it will leak DMA mapping entries...

CVE-2021-47032

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix tx skb dma unmap The first pointer in the txp needs to be unmapped as well, otherwise it will leak DMA mapping entries...

CVE-2021-47028 mt76: mt7915: fix txrate reporting

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...

CVE-2021-47028

CVE-2021-47028 affects the Linux kernel mt76 mt7915 driver stack. The issue is in tx rate reporting for mt7915e devices (cfg80211/mac80211 flow), where rate_info was not checked correctly, leading to unexpected or incorrect bitrate reporting. The connected NASL document confirms a fix in the txra...

CVE-2021-47028 mt76: mt7915: fix txrate reporting

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...

CVE-2021-47028

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix txrate reporting Properly check rateinfo to fix unexpected reporting. 1215.161863 Call trace: 1215.164307 cfg80211calculatebitrate+0x124/0x200 cfg80211 1215.170139 ieee80211supdatemetric+0x80/0xc0 mac80211...

CVE-2021-47021 mt76: mt7915: fix memleak when mt7915_unregister_device()

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915unregisterdevice mt7915txtokenput should get call before mt76freependingtxwi...

CVE-2021-47021 mt76: mt7915: fix memleak when mt7915_unregister_device()

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915unregisterdevice mt7915txtokenput should get call before mt76freependingtxwi...

CVE-2021-47021

CVE-2021-47021 is a Linux kernel vulnerability in the mt76 mt7915 driver area. The issue is a memory leak that occurs during mt7915_unregister_device(), with a specific root-cause: mt7915_tx_token_put() must be called before mt76_free_pending_txwi(). The description notes that the memory leak was...

CVE-2021-47021

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: fix memleak when mt7915unregisterdevice mt7915txtokenput should get call before mt76freependingtxwi...

kernel: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915mcuexit Always purge mcu skb queues in mt7915mcuexit routine even if mt7915firmwarestate fails...

kernel: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 As comment of pcigetdevice says, it returns a pcidevice with its refcount increased. We need to call pcidevput to decrease the refcount. Save the return value of...

kernel: wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix memory leak in mt7915mcuexit Always purge mcu skb queues in mt7915mcuexit routine even if mt7915firmwarestate fails...

kernel: mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 As comment of pcigetdevice says, it returns a pcidevice with its refcount increased. We need to call pcidevput to decrease the refcount. Save the return value of...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips. An attacker has exploited the vulnerability to escalate privileges. The following products are affected: MT5221, MT7603, MT7613, MT7615, MT7622, MT7628,...

GSD-2023-1000742 mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2()

mt76: mt7915: Fix PCI device refcount leak in mt7915pciinithif2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

PT-2025-40149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to a PCI device reference count leak within the mt7915 pci init hif2 function. The issue arises because the pci get device function increments t...

MediaTek wifi driver 缓冲区错误漏洞

MediaTek wifi driver is a wifi driver from MediaTek. A buffer error vulnerability exists in the MediaTek wifi 7.6.2.3 driver version, which stems from a lack of bounds checking in the wifi driver, and can be exploited by an attacker to locally escalate privileges, affecting the following products...

GSD-2022-1002770 mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector

mt76: mt7915: fix possible NULL pointer dereference in mt7915macfillrxvector This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1001721 mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU

mt76: mt7915: fix injected MPDU transmission to not use HW A-MSDU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...