Vulnerability in Kernel package: mt76: mt7921: fix possible invalid register access
Summary
GSD-2021-1000235: mt76: mt7921: fix possible invalid register access. Affects Kernel versions >= ffa1bf97425bd511b105ce769976e20a845a71e9, < b13cbc536990ff609afa878b6211cd6f6265ba60. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionalities for the proper functioning of the system. The mt76 module within the Kernel package is specifically designed for MediaTek MT76x0/MT76x2/MT7921 Wi-Fi chips. These chips are commonly used in wireless network devices. The vulnerability identified in this package relates to a potential invalid register access in the mt7921 driver.
Vulnerability Detail
The vulnerability in the mt76: mt7921 driver could allow an attacker to perform invalid register access, potentially leading to unauthorized access or manipulation of sensitive data. This vulnerability has not been proven to have a specific impact or attack scenario yet. However, if successfully exploited, it could result in security breaches, data leaks, or system instability. The vulnerability was introduced in version v5.12 of the Linux Kernel and has been fixed in version v5.12.4 by commit b13cbc536990ff609afa878b6211cd6f6265ba60.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the fix by updating the Kernel package as mentioned above.
Conclusion
The vulnerability in the Kernel package's mt76: mt7921 driver could potentially lead to unauthorized access or manipulation of sensitive data. It is crucial to update the Kernel package to version v5.12.4 or later to mitigate this vulnerability. For more information or assistance, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software.
The mt76 module is a part of the Kernel package and is specifically designed for MediaTek MT76x0/MT76x2/MT7921 Wi-Fi chips.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to unauthorized access or manipulation of sensitive data, security breaches, data leaks, or system instability.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.12.4 or later. This can be done by pulling the latest updates from the official Linux Kernel repository or waiting for updated packages from your Linux distribution.
For more details about this vulnerability, you can refer to the provided references link or reach out to info@devnack.com for further support.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
