PT-2024-32761 · Linux+4 · Linux Kernel+4
Published
2024-08-16
·
Updated
2025-04-01
·
CVE-2024-47714
CVSS v2.0
6.8
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.58
Description
A issue has been resolved in the Linux kernel related to the wifi: mt76: mt7996 module. The chainmask is u16, and using hweight8 cannot get the correct tx ant. Without the patch, the tx ant of band 2 would be -1, leading to a stack-out-of-bounds error in the
mt7996 mcu add sta function.Recommendations
For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the
mt7996 mcu add sta function until a patch is available.Exploit
Fix
Out of bounds Read
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu