Critical NULL Pointer Dereference in Linux Kernel's mt7921 WiFi Driver
Summary
CVE-2024-46860: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It supports a wide range of hardware architectures and is known for its stability and performance. The mt7921 WiFi driver is part of the mt76 family, which provides support for MediaTek wireless devices. This driver is responsible for managing WiFi connections and ensuring proper communication between the operating system and the hardware. However, a recent vulnerability has been identified in the mt7921 driver, which could lead to system instability and potential crashes.
Vulnerability Detail
The vulnerability, identified as CVE-2024-46860, arises from a NULL pointer dereference in the mt7921_ipv6_addr_change function. This function is invoked as a notifier when the WiFi is disabled. At this point, the mvif->phy pointer is already NULL, leading to a situation where the driver attempts to access a non-existent memory location. This can result in a system crash or unexpected behavior, posing a significant risk to system stability and security.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the mt7921 driver until the kernel is updated. This can be done by executing the following command in the terminal:
sudo modprobe -r mt7921
This command removes the driver from the kernel, preventing it from being used until the vulnerability is resolved.
Conclusion
The CVE-2024-46860 vulnerability in the Linux kernel's mt7921 WiFi driver poses a significant risk to system stability due to a NULL pointer dereference. Users are advised to update their kernel to mitigate this issue and can utilize Vulert to monitor their systems for vulnerabilities.
See every vulnerability recorded for linux →
FAQ
CVE-2024-46860 is a vulnerability in the Linux kernel's mt7921 WiFi driver that can lead to a NULL pointer dereference, causing system crashes.
You can use the Vulert platform to check if your application is affected by this vulnerability. Simply upload your manifest file or use the Vulert playground without signup.
The primary risk is system instability, which can lead to crashes and unexpected behavior when the WiFi is disabled.
Yes, the permanent fix is to update the Linux kernel to a version that includes the patch for this vulnerability.
While you can continue using your system, it is highly recommended to apply the fix as soon as possible to avoid potential crashes and instability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
