Kernel Panic Vulnerability in Linux Package: Addressing Use-After-Free Issue in MT798X
Summary
DEBIAN-CVE-2024-44997: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() When there are multiple ap interfaces on one band and with WED on, turni... Affects linux versions < 6.10.7-1. Fixed in 6.10.7-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of the Debian operating system, providing essential functionalities for managing hardware and system resources. It is widely used across various distributions and is critical for system stability and performance. This specific vulnerability affects the MT798X chipset, which is utilized in networking devices, leading to potential system crashes under certain conditions.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the mtk_wed_setup_tc_block_cb() function, where a use-after-free condition can lead to a kernel panic. This occurs when multiple access point interfaces are present on a single band with WED (Wake-on-Ethernet) enabled. When an interface is turned down, the cb_priv variable is freed without being set to NULL, and subsequent checks do not account for this, resulting in a crash. This vulnerability can lead to system instability and unexpected behavior, particularly in networking scenarios.
How To Fix
Minimum fixed version
6.10.7-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid turning down interfaces with WED enabled until the patch is applied. This may help prevent the kernel panic from occurring while a permanent fix is being implemented.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks, particularly for users of the MT798X chipset. It is crucial to apply the recommended updates to mitigate potential system crashes and ensure stable operation. Users are encouraged to monitor their systems for vulnerabilities using tools like Vulert.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to crashes or arbitrary code execution.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The primary risk is a kernel panic, which can lead to system crashes and loss of data. This can disrupt services and affect system reliability.
Yes, the vulnerability specifically affects devices using the MT798X chipset when multiple access point interfaces are configured.
If an immediate update is not possible, avoid turning down interfaces with WED enabled as a temporary measure to prevent kernel panic.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
