Use-After-Free Vulnerability in Linux Kernel's MT7925E Driver
Summary
DEBIAN-CVE-2024-27049: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared ir... Affects linux versions < 6.7.12-1. Fixed in 6.7.12-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system. The kernel is modular, allowing for the addition of drivers that enable hardware components to communicate with the system. The MT7925E driver is specifically designed for MediaTek's wireless devices, facilitating Wi-Fi connectivity. This driver, like many others, is susceptible to vulnerabilities that can compromise system stability and security.
Vulnerability Detail
In the Linux kernel, a use-after-free vulnerability has been identified in the MT7925E driver, specifically in the free_irq() function. This issue arises when the shared IRQ handler does not properly handle unexpected events after the device has been deregistered. The vulnerability can lead to resource access errors, potentially allowing an attacker to exploit the system by causing crashes or executing arbitrary code. The vulnerability was introduced in commit a304e1b82808, which aimed to debug shared IRQs but inadvertently created a flaw that could be exploited.
How To Fix
Minimum fixed version
6.7.12-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workaround has been provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any risks associated with the use-after-free issue.
Conclusion
The identified use-after-free vulnerability in the Linux kernel's MT7925E driver poses significant risks to system stability and security. It is crucial for users to update their systems to the patched version 6.7.12-1 to mitigate these risks. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to crashes or arbitrary code execution.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The risks include system crashes, unauthorized access, and potential exploitation by attackers to execute malicious code.
While no specific workaround is available, keeping your system updated and monitoring for patches is crucial.
Detailed information can be found in the Debian CVE database at https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2024-27049.json.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
