CVE-2024-27049

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925e: fix use-after-free in free_irq()

From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For this case, let's apply MT76_REMOVED flag to indicate the device was removed and do not run into the resource access anymore.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc948b5da6bbec742b433138e3e3f9537a85af2e5 < 84470b48af03a818039d587478b415cbcb264ff5affected
LinuxLinuxc948b5da6bbec742b433138e3e3f9537a85af2e5 < 6d9930096e1f13cf6d9aabfbf95d0e05fb04144faffected
LinuxLinuxc948b5da6bbec742b433138e3e3f9537a85af2e5 < a5a5f4413d91f395cb2d89829d376d7393ad48b9affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.7.11 <= 6.7.*unaffected
LinuxLinux6.8.2 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References