CVE-2024-27049

HIGH

Linux Kernel 6.7-6.7.10, 6.8-6.8.1 - Use-After-Free in mt7925e WiFi IRQ Handler

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925e: fix use-after-free in free_irq() From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For this case, let's apply MT76_REMOVED flag to indicate the device was removed and do not run into the resource access anymore.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/84470b48af03a818039d587478b415cbcb264ff5

Patch

https://git.kernel.org/stable/c/6d9930096e1f13cf6d9aabfbf95d0e05fb04144f

Patch

https://git.kernel.org/stable/c/a5a5f4413d91f395cb2d89829d376d7393ad48b9

Scores

CVSS v3 7.8

EPSS 0.0028

EPSS Percentile 19.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-416

Status published

Products (11)

linux/Kernel 6.7.0 - 6.7.11linux

linux/Kernel 6.8.0 - 6.8.2linux

Linux/Linux < 6.7

Linux/Linux 6.7

Linux/Linux 6.7.11 - 6.7.*

Linux/Linux 6.8.2 - 6.8.*

Linux/Linux 6.9

Linux/Linux c948b5da6bbec742b433138e3e3f9537a85af2e5 - 6d9930096e1f13cf6d9aabfbf95d0e05fb04144f

Linux/Linux c948b5da6bbec742b433138e3e3f9537a85af2e5 - 84470b48af03a818039d587478b415cbcb264ff5

Linux/Linux c948b5da6bbec742b433138e3e3f9537a85af2e5 - a5a5f4413d91f395cb2d89829d376d7393ad48b9

... and 1 more

Published May 01, 2024

Tracked Since Feb 18, 2026