Kernel NULL Pointer Dereference in Linux due to mt76 Driver Issue
Summary
CVE-2023-53071: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: do not run mt76_unregister_device() on unregistered hw Trying to probe a mt7921e pci card without firmware results in a successful probe whe... Affects linux versions < 6.1.115-1. Fixed in 6.1.115-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services and managing hardware resources. The mt76 driver is responsible for supporting various wireless devices, including the mt7921e PCI card. This driver facilitates communication between the operating system and the hardware, enabling wireless connectivity. However, a recent vulnerability has been identified that affects the stability and security of systems using this driver.
Vulnerability Detail
In the Linux kernel, a vulnerability was discovered in the mt76 driver related to the handling of the mt7921e PCI card. When attempting to probe this card without the necessary firmware, the driver erroneously allows a successful probe without having called ieee80211_register_hw. Consequently, when the driver is removed, ieee80211_unregister_hw is invoked unconditionally, leading to a NULL pointer dereference in the kernel. This can result in system crashes or unexpected behavior, posing significant risks to system stability and security.
How To Fix
Minimum fixed version
6.1.115-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate the risks associated with this issue.
Conclusion
The CVE-2023-53071 vulnerability in the Linux kernel's mt76 driver poses a significant risk of system instability due to a NULL pointer dereference. Users are strongly advised to update their systems to the patched versions to ensure continued security and stability.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53071 is a vulnerability in the Linux kernel's mt76 driver that can lead to a kernel NULL pointer dereference when probing certain wireless devices without firmware.
This vulnerability can cause system crashes or unexpected behavior, potentially compromising system stability and security.
You should update your Linux kernel to the patched versions as soon as possible to mitigate the risks associated with this vulnerability.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check if your application is affected by this vulnerability using the Vulert playground without any signup.
More information can be found in the official CVE database and through the Linux kernel mailing lists or security advisories.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
