Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the firmware is not available. Add cancel_delayed_work_sync(&dev->mlo_pm_work) in all relevant teardown and suspend paths: - mt7925_mac_reset_work() (chip reset recovery) - mt7925e_unregister_device() (PCIe unbind) - mt7925_pci_suspend() (PCIe bus suspend) - mt7925_suspend() (mac80211 suspend) - mt7925u_suspend() (USB bus / runtime suspend) This ensures the work is stopped before the device state becomes invalid.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
276a568832577c81ec90b62dc506bbdc3781ca46 to < 5be6d02837d418bc6c805b5cab1b338de6de9ca7affected276a568832577c81ec90b62dc506bbdc3781ca46 to < c5e073f2fbfd34d22099a50d96f60990799753e2affected276a568832577c81ec90b62dc506bbdc3781ca46 to < 2889e84282dda147f10b10d94cf0efd90a349c53affected74eb79258bfd5f2ffe6d26a09c898992b2afa1ceaffected6.14.3 to < 6.15affected
Linux Linux
Default version status: affected
6.15affected0 to < 6.15unaffected6.18.50 to ≤ 6.18.*unaffected7.2.4 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected