Back to bug 2215892

Who When What Removed Added
Rohit Keshri 2023-06-19 10:41:58 UTC Doc Text A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.
Rohit Keshri 2023-06-19 10:43:04 UTC CC acaringi, allarkin, bhu, chwhite, dbohanno, ddepaula, debarbos, dvlasenk, ezulian, hkrzesin, jarod, jdenham, jfaracco, jferlan, jforbes, jlelli, joe.lawrence, jshortt, jstancek, jwyatt, kcarcia, kernel-mgr, ldoskova, lgoncalv, lleshchi, lzampier, nmurray, ptalbert, qzhao, rrobaina, rvrbovsk, rysulliv, scweaver, swood, tyberry, walters, wcosta, williams, wmealing, ycote, ymankad
Rohit Keshri 2023-06-19 10:45:19 UTC CC dfreiber, jburrell, rogbas, vkumar
Rohit Keshri 2023-06-19 10:49:55 UTC Summary kernel: use-after-free in wifi mt7921 fw features query CVE-2023-3317 kernel: use-after-free in wifi mt7921 fw features query
Alias CVE-2023-3317
Paige Jung 2023-06-19 14:30:57 UTC Doc Text A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem. A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in the wifi mt76/mt7921 sub-component of the Linux Kernel. This issue could allow an attacker to crash the system after the 'features' memory releases which could lead to a kernel information leak.
Product Security DevOps Team 2023-06-19 21:38:55 UTC Resolution --- NOTABUG
Status NEW CLOSED
Last Closed 2023-06-19 21:38:55 UTC
Jan Pazdziora 2023-07-26 13:45:37 UTC CC jpazdziora
Flags needinfo?(rkeshri)

Back to bug 2215892