Описание
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.
Отчет
This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local administrative privileges to configure virtual interface links and is restricted to systems utilizing MediaTek MT7925 wireless hardware. Under memory exhaustion conditions, failure to handle allocation errors leads to a kernel crash, resulting in a denial of service without compromising system confidentiality or integrity. Enterprise server environments rarely deploy Wi-Fi adapters, significantly limiting real-world exposure across standard installations.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2025:20095 | 11.11.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:20518 | 11.11.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:20518 | 11.11.2025 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.4 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.
In the Linux kernel, the following vulnerability has been resolved: w ...
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.
Уязвимость функции mt7925_change_vif_links() компонента mediatek/mt76/mt7925/main.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
4.4 Medium
CVSS3