CVE-2024-47714CWE-787

CVE-2024-47714

High · published October 21, 2024

CVSS v3.1
7.6
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7996: use hweight16 to get correct tx antenna

The chainmask is u16 so using hweight8 cannot get correct tx_ant.

Without this patch, the tx_ant of band 2 would be -1 and lead to the

following issue:

BUG: KASAN: stack-out-of-bounds in mt7996_mcu_add_sta+0x12e0/0x16e0 [mt7996e]

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-10-21T16:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.2, < 6.6.546.6.54
linux/linux_kernel≥ 6.7, < 6.10.136.10.13
linux/linux_kernel≥ 6.11, < 6.11.26.11.2
References (4)
https://git.kernel.org/stable/c/33954930870c18ec549e4bca0eeff43e252cb740 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/50d87e3b70980abc090676b6b4703fcbd96221f9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8f51fc8a9e2fd96363d8ec3f4ee4b78dd64754e3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f98c3de92bb05dac4a4969df8a4595ed380b4604 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 21 OCT 11:53Z
    wifi: mt76: mt7996: use hweight16 to get correct tx antenna
    cvelistv5