Memory Leak in mt76: mt7915
Summary
GSD-2021-1000237: mt76: mt7915: fix memleak when mt7915_unregister_device(). Affects Kernel versions >= f285dfb98562e8380101095d168910df1d07d8be, < d754c80ae82a662e692a82faad71b8c218cb7f52. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76 package is a driver for MediaTek MT76x0 wireless LAN devices. It provides support for various MediaTek wireless chipsets, including the mt7915. The mt7915 is a high-performance Wi-Fi 6 (802.11ax) chip. The driver allows communication between the operating system and the mt7915 hardware, enabling wireless connectivity. However, a vulnerability has been identified in the mt7915 driver that can lead to a memory leak when unregistering the device.
Vulnerability Detail
The vulnerability in the mt7915 driver occurs during the device unregister process. When unregistering the device, a memory leak can occur, leading to the consumption of system resources. This can result in degraded system performance and potential denial-of-service conditions. The vulnerability was introduced in version v5.12 of the Linux Kernel and has been fixed in version v5.12.4 by commit d754c80ae82a662e692a82faad71b8c218cb7f52.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The memory leak vulnerability in the mt7915 driver can lead to resource consumption and potential denial-of-service conditions. It is crucial to update the Linux Kernel to version v5.12.4 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can result in a memory leak, leading to the consumption of system resources and potential denial-of-service conditions.
The vulnerability was introduced in version v5.12 of the Linux Kernel.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will provide real-time alerts for open-source vulnerabilities.
Yes, the vulnerability has been fixed in version v5.12.4 of the Linux Kernel.
You can find more information about this vulnerability in the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
