CVE-2024-27049

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to a use-after-free vulnerability in the free irq() function of the MediaTek MT7925E (PCIe) driver in the Linux kernel. This vulnerability can be exploited to cause a denial of service. The mt7925 pci remove() function in the drivers/net/wireless/mediatek/mt76/mt7925/pci.c module is also affected by the reuse of previously freed memory. To address this issue, a flag MT76 REMOVED is applied to indicate that the device was removed, preventing further resource access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.