In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: use hweight16 to get correct tx antenna
The chainmask is u16 so using hweight8 cannot get correct txant. Without this patch, the txant of band 2 would be -1 and lead to the following issue: BUG: KASAN: stack-out-of-bounds in mt7996mcuadd_sta+0x12e0/0x16e0 [mt7996e]
[
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7996/mcu.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f51fc8a9e2fd96363d8ec3f4ee4b78dd64754e3",
"digest": {
"line_hashes": [
"159004360100912840071302657615334084824",
"128380800075308697662858893476862377124",
"190413027023346224024461031430652767893",
"146567822279477750118102717988351959823"
],
"threshold": 0.9
},
"id": "CVE-2024-47714-20cca2d8"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7996/mcu.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@33954930870c18ec549e4bca0eeff43e252cb740",
"digest": {
"line_hashes": [
"159004360100912840071302657615334084824",
"128380800075308697662858893476862377124",
"190413027023346224024461031430652767893",
"146567822279477750118102717988351959823"
],
"threshold": 0.9
},
"id": "CVE-2024-47714-94a02234"
},
{
"signature_type": "Line",
"deprecated": false,
"target": {
"file": "drivers/net/wireless/mediatek/mt76/mt7996/mcu.c"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@50d87e3b70980abc090676b6b4703fcbd96221f9",
"digest": {
"line_hashes": [
"159004360100912840071302657615334084824",
"128380800075308697662858893476862377124",
"190413027023346224024461031430652767893",
"161132484531953486301930713695054849542"
],
"threshold": 0.9
},
"id": "CVE-2024-47714-f94cd034"
}
]