PT-2024-32254 · Linux+5 · Linux Kernel+5

Bert Karwatzki

·

Published

2024-08-12

·

Updated

2026-05-26

·

CVE-2024-46860

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer access issue has been resolved in the Linux kernel's wifi module, specifically in mt76 and mt7921. The issue occurred when disabling wifi, and the mt7921 ipv6 addr change() function was called as a notifier. At this point, mvif->phy is already NULL, and it cannot be used.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-13979
ALT-PU-2024-14046
AZL-49821
AZL-49835
BDU:2025-03226
CVE-2024-46860
ECHO-7B61-8FC4-FC00
OESA-2025-1159
OPENSUSE-SU-2024_3984-1
OPENSUSE-SU-2024_3986-1
SUSE-SU-2024:3984-1
SUSE-SU-2024:3986-1
SUSE-SU-2024:4318-1
SUSE-SU-2024:4387-1
SUSE-SU-2025:20163-1
SUSE-SU-2025:20164-1
SUSE-SU-2025:20246-1
SUSE-SU-2025:20247-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu