Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY capability returned by mt76_connac_get_he_phy_cap(). That helper can return NULL when no capability entry matches the vif type. Fetch the capability before appending the TLV and skip the HE-specific setup when no matching capability is available.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
e6d557a78b6016eee7b9cd6832343efd32cc0b27 to < 8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67affectede6d557a78b6016eee7b9cd6832343efd32cc0b27 to < 23a2b98e754da04e0e90314d5fa8ca44349590fbaffectede6d557a78b6016eee7b9cd6832343efd32cc0b27 to < a031f454f14e3e76ad03bcb23918e1a82b4b0869affectede6d557a78b6016eee7b9cd6832343efd32cc0b27 to < 871549814eb4da081f1e93cc0c7ea626a310a966affectede6d557a78b6016eee7b9cd6832343efd32cc0b27 to < 6f99a5667c6c7c3e0da1d3c4dc8dfb103042609eaffectede6d557a78b6016eee7b9cd6832343efd32cc0b27 to < 8e9db062654a388d0fa587acbeeae68dd33eba41affected
Linux Linux
Default version status: affected
5.18affected0 to < 5.18unaffected6.1.183 to ≤ 6.1.*unaffected6.6.148 to ≤ 6.6.*unaffected6.12.101 to ≤ 6.12.*unaffected6.18.42 to ≤ 6.18.*unaffected7.1.6 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/8d5f1f4d2ea2c9d626ccc28dba7ea0df862acc67 ↗
- https://git.kernel.org/stable/c/23a2b98e754da04e0e90314d5fa8ca44349590fb ↗
- https://git.kernel.org/stable/c/a031f454f14e3e76ad03bcb23918e1a82b4b0869 ↗
- https://git.kernel.org/stable/c/871549814eb4da081f1e93cc0c7ea626a310a966 ↗
- https://git.kernel.org/stable/c/6f99a5667c6c7c3e0da1d3c4dc8dfb103042609e ↗
- https://git.kernel.org/stable/c/8e9db062654a388d0fa587acbeeae68dd33eba41 ↗