Описание
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix linked list corruption
Never leave scheduled wcid entries on the temporary on-stack list
A flaw was found in the linux kernal wifi subsystem mt76_txq_schedule_pending_wcid() and mt76_txq_schedule_pending() functions of the mt76 driver. Under certain conditions, scheduled wcid entries are left on a temporary on‑stack list, which may lead to linked‑list corruption and memory corruption, allowing a local attacker to cause a denial of service.
Отчет
This vulnerability is evaluated as having a Moderate impact because exploitation requires the presence and active use of supported MediaTek Wi-Fi hardware, limiting the attack surface to endpoints equipped with these specific wireless devices. Red Hat Enterprise Linux server environments rarely deploy Wi-Fi interfaces or autoload wireless drivers in standard configurations. An attacker must possess local access on an affected host with the driver actively handling transmission queues to induce memory corruption and crash the system.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Affected | ||
| Red Hat Enterprise Linux 10 | kernel | Fixed | RHSA-2025:22395 | 01.12.2025 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | kernel | Fixed | RHSA-2025:22571 | 02.12.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:22405 | 01.12.2025 |
| Red Hat Enterprise Linux 9 | kernel | Fixed | RHSA-2025:22405 | 01.12.2025 |
Показывать по
Дополнительная информация
Статус:
7.6 High
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list
In the Linux kernel, the following vulnerability has been resolved: w ...
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave scheduled wcid entries on the temporary on-stack list
Уязвимость компонента tx.c ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на целостность защищаемой информации
7.6 High
CVSS3