Vulnerability in Kernel: mt76: mt7921: fix crash when startup fails
Summary
GSD-2022-1001408: mt76: mt7921: fix crash when startup fails. Affects Kernel versions < c1a5e6002ec441a3b9fb4d048b4b49ae93409a46. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and interfaces with hardware devices. It is responsible for managing system resources, executing processes, and facilitating communication between software and hardware. The mt76 module within the Kernel is specifically designed for MediaTek MT76x0 and MT76x2 wireless LAN drivers. These drivers enable wireless network connectivity on devices that utilize MediaTek wireless chipsets. The mt7921 driver is a part of the mt76 module and is responsible for managing the MediaTek MT7921 Wi-Fi chipset. This vulnerability affects the mt7921 driver and can lead to a system crash when the driver fails to start up properly.
Vulnerability Detail
The vulnerability in the mt7921 driver of the Kernel occurs when the driver fails to start up correctly. This can result in a system crash, impacting the stability and availability of the affected device. The exact cause of the startup failure is not specified in the vulnerability details. However, it is important to note that this vulnerability has not been proven to be exploitable for malicious purposes at this time. The fix for this vulnerability was implemented in the Linux Kernel version v5.16.20 through commit c1a5e6002ec441a3b9fb4d048b4b49ae93409a46.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround is mentioned for this vulnerability.
Conclusion
The vulnerability in the mt7921 driver of the Kernel can lead to a system crash when the driver fails to start up properly. It is recommended to update the Linux Kernel to version v5.16.20 or later to mitigate this vulnerability. Users can obtain the updated Kernel source code from the official Linux Kernel repository or wait for their Linux distribution to provide an updated package. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can lead to a system crash when the mt7921 driver fails to start up properly. This can result in the device becoming unresponsive and potentially impacting the availability of services or data stored on the affected device.
The vulnerability itself does not specify any remote exploitation vectors. However, it is always recommended to keep systems up to date with the latest security patches to mitigate potential risks.
There are no known instances of this vulnerability being exploited in the wild at this time. However, it is still important to apply the necessary updates to ensure the security and stability of the system.
This vulnerability affects systems that utilize the mt7921 Wi-Fi chipset and the corresponding mt7921 driver in the Linux Kernel. Any device or system that meets these criteria may be impacted and should apply the recommended fix.
For more information about this vulnerability, you can refer to the source link provided in the vulnerability details: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1001xxx/GSD-2022-1001408.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
