Vulnerability in mt76 DMA Initialization in Kernel
Summary
GSD-2022-1001732: mt76: dma: initialize skip_unmap in mt76_dma_rx_fill. Affects Kernel versions < 55c93a89e31dcf2f99482be8dd28d99a3431dd9a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The mt76 package is a driver for MediaTek MT76x0e, MT76x2e, MT7603, MT7615, and MT7663 wireless LAN chipsets. It provides support for various wireless functionalities and is commonly used in Linux-based systems. The vulnerability in mt76 DMA initialization affects the package's ability to properly initialize the 'skip_unmap' variable in the 'mt76_dma_rx_fill' function.
Vulnerability Detail
The vulnerability arises due to the uninitialized state of the 'skip_unmap' variable in the 'mt76_dma_rx_fill' function. This can lead to potential security risks, although the actual impact and attack plausibility have not been proven. Attackers may exploit this vulnerability to execute arbitrary code, cause a denial-of-service condition, or gain unauthorized access to sensitive information. The vulnerability has been addressed in Linux Kernel version v5.15.34 through commit 55c93a89e31dcf2f99482be8dd28d99a3431dd9a.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in mt76 DMA initialization can pose significant security risks to systems utilizing this package. It is crucial to update the affected systems to the fixed version of the Linux Kernel to mitigate these risks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
mt76 is a driver package for MediaTek wireless LAN chipsets, providing support for various functionalities.
The impact of this vulnerability can range from arbitrary code execution to denial-of-service attacks and unauthorized access to sensitive information.
Yes, this vulnerability has been fixed in Linux Kernel version v5.15.34 through commit 55c93a89e31dcf2f99482be8dd28d99a3431dd9a.
To fix this vulnerability, update your system to Linux Kernel version v5.15.34 or later by pulling the latest updates from the official Linux Kernel repository.
No specific workaround has been mentioned for this vulnerability. It is recommended to update to the fixed version of the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
