Vulnerability in Kernel: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode
Summary
GSD-2021-1002564: mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode. Affects Kernel versions >= 37f4ca907c462d7c8a1ac9e7e3473681b5f893dd, < 14b03b8cebdf18ff13c39d58501b625411314de2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It provides essential functionality for the proper functioning of the system. The vulnerability affects the mt76 driver in the Kernel, specifically the mt7915 module. The mt7915 module is responsible for managing the MediaTek MT7915 Wi-Fi chipset. This vulnerability can lead to a NULL pointer dereference in the mt7915_get_phy_mode function, potentially causing a system crash or other unpredictable behavior.
Vulnerability Detail
The vulnerability arises from a NULL pointer dereference in the mt7915_get_phy_mode function of the mt7915 module. This can occur when the function is called with a NULL pointer as an argument. An attacker could potentially exploit this vulnerability by crafting a malicious input that triggers the NULL pointer dereference, leading to a denial of service (system crash) or other unpredictable behavior. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v5.8 of the Linux Kernel and has been fixed in version v5.15.7.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the Kernel's mt76 driver, specifically the mt7915 module, can lead to a NULL pointer dereference in the mt7915_get_phy_mode function. This vulnerability has the potential to cause a system crash or other unpredictable behavior. It is recommended to update the Linux Kernel to version v5.15.7 or later to fix this vulnerability and ensure the system is protected. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can range from a system crash (denial of service) to other unpredictable behavior. However, the exact impact and attack plausibility have not been proven yet.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. The playground allows you to analyze your application's manifest file (e.g., package-lock.json) and provides real-time alerts for open-source vulnerabilities.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the latest version to ensure the vulnerability is patched.
The vulnerability was introduced in version v5.8 of the Linux Kernel. Versions prior to v5.15.7 are affected.
You can find more information about this vulnerability in the GSD-2021-1002564 JSON report available at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002564.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
