CVE-2024-57989

Summary

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links

In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux69acd6d910b0c83842bd45c36224d4f8fe59d1d4 < 5872530c2862700070223a2c2ea85642bf2f8875affected
LinuxLinux69acd6d910b0c83842bd45c36224d4f8fe59d1d4 < 2f709fe755c16b811ba7339ae4c3ee2c72323d3daffected
LinuxLinux69acd6d910b0c83842bd45c36224d4f8fe59d1d4 < 5cd0bd815c8a48862a296df9b30e0ea0da14acd3affected
LinuxLinux6.11affected
LinuxLinux0 < 6.11unaffected
LinuxLinux6.12.13 <= 6.12.*unaffected
LinuxLinux6.13.2 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References