Dereference of Pointer 'sta' Before Null Check in mt76: mt7615
Summary
GSD-2021-1000234: mt76: mt7615: Fix a dereference of pointer sta before it is null checked. Affects Kernel versions >= fb2e48febf56c8993c5355dd2084c3d36b70c110, < 28d7cb12d403f7f49e0914fd39b869ce5521f726. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76 package is a driver for MediaTek MT76x0e, MT76x2e, MT7603, MT7615, and MT7628 wireless LAN chipsets. It provides functionality for these chipsets to communicate with the Linux kernel. The mt7615 component specifically handles the MT7615 chipset. This vulnerability affects the mt7615 component in the Linux Kernel.
Vulnerability Detail
The vulnerability in mt76: mt7615 involves a dereference of the 'sta' pointer before it is null checked. This can lead to a null pointer dereference, causing a system crash or potential privilege escalation. The vulnerability was introduced in version v5.12.4 of the Linux Kernel and was fixed in version v5.12.4 by commit 28d7cb12d403f7f49e0914fd39b869ce5521f726. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in mt76: mt7615 involving the dereference of the 'sta' pointer before null check can lead to system crashes or potential privilege escalation. It is crucial to update the Linux Kernel to version v5.12.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mt76 is a driver package for MediaTek wireless LAN chipsets, including MT7615.
The impact of this vulnerability can range from a system crash to potential privilege escalation.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file and Vulert will analyze it for vulnerabilities.
Yes, the vulnerability has been fixed in Linux Kernel version v5.12.4.
There are no specific temporary measures mentioned for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
