PT-2024-11483
CVE-2021-47540
·
Published
2021-11-18
·
Updated
2024-08-19
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel version 5.10.75
Description
A NULL pointer dereference vulnerability has been resolved in the Linux kernel. The issue occurred in the mt7915 get phy mode routine when adding an IBSS interface to the mt7915 driver. This vulnerability could lead to a kernel crash or potentially allow an attacker to execute arbitrary code.
Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the NULL pointer dereference in the mt7915 get phy mode routine. As a temporary workaround, consider disabling the IBSS interface on the mt7915 driver until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾