Lucene search
+L

14 matches found

OSV
OSV
added 2026/07/19 2:4 p.m.7 views

CVE-2026-63866 wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Clear wcid pointer in mt7996macstadeinitlink Clear WCID pointer removing the sta link in mt7996macstadeinitlink routine...

8.8CVSS5.3AI score0.00223EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 2:4 p.m.16 views

CVE-2026-63866

CVE-2026-63866 relates to a Linux kernel issue in the mt76/mt7996 Wi‑Fi stack. The vulnerability arises from the mt7996_mac_sta_deinit_link() routine where the WCID pointer is cleared, removing the STA link. The issue is addressed by kernel fixes documented in the linked patches (stable kernel up...

8.8CVSS5.3AI score0.00223EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.6 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mt76: Fixed a use-after-free by removing a non-RCU wcid pointer. This fix addresses an issue detected by KASAN regarding use-after-free in mt76txqschedule. This was done by protecting mtxq-wcid with rculock between...

7.8CVSS6.4AI score0.00296EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/07/14 12:25 a.m.9 views

kernel: mt76: fix use-after-free by removing a non-RCU wcid pointer

A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure mtxq-wcid that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability,...

7.8CVSS6.9AI score0.00296EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/06/24 6:19 a.m.7 views

kernel: mt76: fix use-after-free by removing a non-RCU wcid pointer

A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure mtxq-wcid that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability,...

7.8CVSS6.9AI score0.00296EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/06/24 4:41 a.m.7 views

kernel: mt76: fix use-after-free by removing a non-RCU wcid pointer

A vulnerability was found in the Linux kernel's mt76 wi-fi driver. A concurrency bug causes the mtxq TX queue to maintain a raw pointer to a wcid structure mtxq-wcid that might be freed by the time it is accessed. This issue can lead to a use-after-free scenario, leading to system instability,...

7.8CVSS6.9AI score0.00296EPSS
SaveExploits0References5
OSV
OSV
added 2025/04/18 1:49 p.m.9 views

OESA-2025-1433 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: atmel: Fix error handling in sndprotoprobe The devicenode pointer is returned by ofparsephandle with refcount incremented. We should use ofnodeput on it wh...

7.8CVSS6.5AI score0.00296EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2025/02/27 3:8 a.m.17 views

SUSE CVE-2022-49328

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76txqschedule by protecting mtxq-wcid with rculock between mt76txqschedule and stainfoalloc, free. 18853.876689...

5.5CVSS6.3AI score0.00296EPSS
SaveExploits0References7
OSV
OSV
added 2025/02/26 7:1 a.m.7 views

DEBIAN-CVE-2022-49479

In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing tx activity can lead to a skb getting added to the status tracking idr after that idr has already been cleaned up, whic...

7.8CVSS5.8AI score0.00259EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 7:1 a.m.3 views

DEBIAN-CVE-2022-49328

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76txqschedule by protecting mtxq-wcid with rculock between mt76txqschedule and stainfoalloc, free. 18853.876689...

7.8CVSS5.5AI score0.00296EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/02/26 2:13 a.m.13 views

CVE-2022-49479

In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing tx activity can lead to a skb getting added to the status tracking idr after that idr has already been cleaned up, whic...

7.8CVSS5.8AI score0.00259EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/02/26 2:10 a.m.14 views

CVE-2022-49328 mt76: fix use-after-free by removing a non-RCU wcid pointer

In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about use-after-free in mt76txqschedule by protecting mtxq-wcid with rculock between mt76txqschedule and stainfoalloc, free. 18853.876689...

7.5AI score0.00296EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/02/26 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse of mt76 when removing a non-RCU wcid pointer...

7.8CVSS5.3AI score0.00296EPSS
SaveExploits0References5
OSV
OSV
added 2022/06/28 5:58 p.m.11 views

GSD-2022-1002573 mt76: fix use-after-free by removing a non-RCU wcid pointer

mt76: fix use-after-free by removing a non-RCU wcid pointer This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

7.2AI score
SaveExploits0
Rows per page
Query Builder