CVE-2024-57989

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links

In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local administrative privileges to configure virtual interface links and is restricted to systems utilizing MediaTek MT7925 wireless hardware. Under memory exhaustion conditions, failure to handle allocation errors leads to a kernel crash, resulting in a denial of service without compromising system confidentiality or integrity. Enterprise server environments rarely deploy Wi-Fi adapters, significantly limiting real-world exposure across standard installations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.