CVE Database›Document archive›CVE-2024-57990

CVE-2024-57990

kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc()

Loading…

Severity

Moderate

Red Hat Product Security

7.1

CVSS 3.1

Review impact separately from score.

Published · February 27, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: fix off by one in mt7925_load_clc()

This comparison should be >= instead of > to prevent an out of bounds read and write.

Statement

This vulnerability is rated as Moderate because exploitation requires local access and the presence of physical MediaTek MT7925 wireless hardware. In typical enterprise and cloud deployments of Red Hat Enterprise Linux, Wi-Fi hardware is rarely present, significantly limiting exposure. Systems without this specific wireless controller or where the driver module is unutilized remain unaffected by the boundary check error during firmware loading.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE-193 · Off-by-one Error