In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925e: fix use-after-free in free_irq()
From commit a304e1b82808 ("[PATCH] Debug shared irqs"), there is a test to make sure the shared irq handler should be able to handle the unexpected event after deregistration. For this case, let's apply MT76_REMOVED flag to indicate the device was removed and do not run into the resource access anymore.
[
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 274.0,
"function_hash": "110939045375814040277840709596430819004"
},
"id": "CVE-2024-27049-9176ed6d",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5a5f4413d91f395cb2d89829d376d7393ad48b9",
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7925/pci.c",
"function": "mt7925_pci_remove"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 274.0,
"function_hash": "110939045375814040277840709596430819004"
},
"id": "CVE-2024-27049-c6ea21c7",
"signature_type": "Function",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d9930096e1f13cf6d9aabfbf95d0e05fb04144f",
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7925/pci.c",
"function": "mt7925_pci_remove"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99965427233462160854004427426443546546",
"101257153403901985949264467149027909572",
"228452493977556747109003249894185794715",
"167056461535923962435280882256035247019"
]
},
"id": "CVE-2024-27049-e7a18dbe",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a5a5f4413d91f395cb2d89829d376d7393ad48b9",
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7925/pci.c"
}
},
{
"deprecated": false,
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"99965427233462160854004427426443546546",
"101257153403901985949264467149027909572",
"228452493977556747109003249894185794715",
"167056461535923962435280882256035247019"
]
},
"id": "CVE-2024-27049-e8a64846",
"signature_type": "Line",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6d9930096e1f13cf6d9aabfbf95d0e05fb04144f",
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7925/pci.c"
}
}
]