Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915_register_ext_phy() succeeded, a failure of the main PHY mt7915_init_debugfs() or mt7915_coredump_register() unwound through free_phy2, which called ieee80211_free_hw() on the ext PHY hw while it was still registered with mac80211, since mt76_unregister_device() only unregisters the main hw. Unregister the ext PHY (thermal + phy + hw) first and skip the redundant free.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < aa55bec92ba7747dd08feff409f8074c5e052e71affected7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < ad706fcf6255494613b94418e7243d98065dbeafaffected7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < 34058ad122f7524e33df8e38caba4b1d803b025aaffected7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < a7fd3bae8e11a7c00df6a5021d9ef248ae9f9bf5affected7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < 648f5f03ff50d4bd719106ace0cdf1d8be02cbddaffected7b8e1ae886e45aed9274048f2836a70b75ecfa40 to < 15b960014f24dce5388d4a2e7274e6490cb3c421affected
Linux Linux
Default version status: affected
5.19affected0 to < 5.19unaffected6.1.188 to ≤ 6.1.*unaffected6.6.157 to ≤ 6.6.*unaffected6.12.110 to ≤ 6.12.*unaffected6.18.52 to ≤ 6.18.*unaffected7.2.6 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/aa55bec92ba7747dd08feff409f8074c5e052e71 ↗
- https://git.kernel.org/stable/c/ad706fcf6255494613b94418e7243d98065dbeaf ↗
- https://git.kernel.org/stable/c/34058ad122f7524e33df8e38caba4b1d803b025a ↗
- https://git.kernel.org/stable/c/a7fd3bae8e11a7c00df6a5021d9ef248ae9f9bf5 ↗
- https://git.kernel.org/stable/c/648f5f03ff50d4bd719106ace0cdf1d8be02cbdd ↗
- https://git.kernel.org/stable/c/15b960014f24dce5388d4a2e7274e6490cb3c421 ↗