Vulnerability in mt76: mt7921
Summary
GSD-2021-1000790: mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report. Affects Kernel versions >= 1c099ab44727c8e42fe4de4d91b53cec3ef02860, < 6919e8a24e70b6ba148fe07f44f835bcdd1a8d02. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76 package is a driver for MediaTek MT76x0 wireless LAN devices. It provides support for various features and functionalities of these devices. The mt7921 module within the mt76 package specifically handles the MT7921 chipset. This chipset is commonly used in Wi-Fi routers and other networking devices. The vulnerability identified in mt7921_mcu_tx_rate_report function can potentially lead to an out-of-bounds issue.
Vulnerability Detail
The mt7921_mcu_tx_rate_report function in the mt7921 module of the mt76 package is susceptible to an out-of-bounds issue. This vulnerability was introduced in version v5.12 of the Linux Kernel by commit 1c099ab44727c8e42fe4de4d91b53cec3ef02860 and is fixed in version v5.12.10 by commit 6919e8a24e70b6ba148fe07f44f835bcdd1a8d02. The impact and attack plausibility of this vulnerability have not been proven yet. However, if successfully exploited, it could potentially lead to arbitrary code execution or denial of service.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in mt76: mt7921 module can potentially lead to an out-of-bounds issue. It is recommended to update the Linux Kernel to version v5.12.10 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mt76 package is a driver for MediaTek MT76x0 wireless LAN devices. It provides support for various features and functionalities of these devices.
The mt7921 module is a component of the mt76 package that specifically handles the MT7921 chipset, commonly used in Wi-Fi routers and other networking devices.
An out-of-bounds issue refers to a situation where a program accesses memory outside the bounds of what has been allocated to it. This can lead to memory corruption, crashes, or potential security vulnerabilities.
The exact method of exploitation for this vulnerability has not been proven yet. However, if successfully exploited, it could potentially lead to arbitrary code execution or denial of service.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you in real-time if any open-source vulnerabilities, including this one, are found.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
