Vulnerability feed

Executive summary

A flaw in the Linux kernel's driver for MediaTek MT7603 wireless chips can cause a crash when frames are injected through a monitor interface. The advisory describes it as a NULL pointer dereference fixed by initializing a global station entry before it is used. The advisory does not state a severity score, and the fix is a kernel stable tree patch that users should apply through their kernel updates.

Technical summary

The vulnerability is a NULL pointer dereference caused by an uninitialized sk_buff_head in the mt7603 driver's driver-private global station WCID. The advisory says the first frame injected through a monitor interface reaches __skb_queue_tail() with an uninitialized queue, which was made reachable by commit 0335c034e726. The fix calls mt76_wcid_init() on the global WCID in mt7603_mac_init() in drivers/net/wireless/mediatek/mt76/mt7603/init.c. The advisory does not state a CVSS score, an attack vector beyond local injection through a monitor interface, affected or fixed kernel version numbers, workarounds, or exploitation status. Detection guidance is not stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/19d6fa087dcf242…5828b8282d4040bad168

Score

No CVSS score published.

Affects

LinuxMediaTek, Inc.LinuxLinux kernelMediaTek, Inc. MT7603