CVE-2024-44997

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free panic in the mtk wed setup tc block cb() function. When there are multiple ap interfaces on one band and with WED on, turning the interface down will cause a kernel panic on MT798X. The problem occurs because cb priv was freed in mtk wed setup tc block() without marking NULL, and mtk wed setup tc block cb() didn't check the value. This could allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.