CVE-2024-44997

kernel: net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()

Loading…

Severity

Moderate

Red Hat Product Security

7.8

CVSS 3.1

Review impact separately from score.

Published · September 4, 2024

Updated · August 5, 2026

Description

A flaw was found in the mtk_wed_ops module in the Linux kernel. When there are multiple ap interfaces on one band and with WED on, turning the interface down will cause a kernel panic on MT798X due to a use-after-free, resulting in a denial of service.

Statement

The mtk_wed_ops module is not built in the kernel shipped in Red Hat Enterprise Linux, so it is not affected by this vulnerability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-416 · Use After Free