CVE-2025-37796

wifi: at76c50x: fix use after free access in at76_disconnect

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

wifi: at76c50x: fix use after free access in at76_disconnect

The memory pointed to by priv is freed at the end of at76_delete_device

function (using ieee80211_free_hw). But the code then accesses the udev

field of the freed object to put the USB device. This may also lead to a

memory leak of the usb device. Fix this by using udev from interface.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.4th percentile
Published
2025-05-01T13:07Z
EPSS history
Timeline
  • 01 MAY 13:07Z
    wifi: at76c50x: fix use after free access in at76_disconnect
    cvelistv5