Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change

When disabling wifi mt7921_ipv6_addr_change() is called as a notifier.
At this point mvif->phy is already NULL so we cannot use it here.

Classification

CVE ID: CVE-2024-46860

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 5.03% (scored less or equal to compared to others)

EPSS Date: 2025-02-15 (when was this score calculated)

References

https://git.kernel.org/stable/c/4bfee9346d8c17d928ef6da2b8bffab88fa2a553
https://git.kernel.org/stable/c/8d92bafd4c67efb692f722d73a07412b5f88c6d6
https://git.kernel.org/stable/c/479ffee68d59c599f8aed8fa2dcc8e13e7bd13c3

Timeline