CVE-2024-42225

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the mt76 driver in the Linux kernel, where the function mt76 connac mcu add nested tlv() has a vulnerability due to uninitialized variables. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is resolved by replacing skb put with skb put zero to avoid potentially reusing uninitialized data.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.