CVE-2024-44997CWE-416

CVE-2024-44997

High · published September 5, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()

When there are multiple ap interfaces on one band and with WED on,

turning the interface down will cause a kernel panic on MT798X.

Previously, cb_priv was freed in mtk_wed_setup_tc_block() without

marking NULL,and mtk_wed_setup_tc_block_cb() didn't check the value, too.

Assign NULL after free cb_priv in mtk_wed_setup_tc_block() and check NULL

in mtk_wed_setup_tc_block_cb().

----------

Unable to handle kernel paging request at virtual address 0072460bca32b4f5

Call trace:

mtk_wed_setup_tc_block_cb+0x4/0x38

0xffffffc0794084bc

tcf_block_playback_offloads+0x70/0x1e8

tcf_block_unbind+0x6c/0xc8

...

---------

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.1th percentile
Weakness
CWE-416 · Use After Free
Published
2024-09-05T00:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.6.486.6.48
linux/linux_kernel≥ 6.7, < 6.10.76.10.7
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 04 SEP 19:54Z
    net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()
    cvelistv5