CVE-2024-57990
kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 27, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
This comparison should be >= instead of > to prevent an out of bounds read and write.
Statement
This vulnerability is rated as Moderate because exploitation requires local access and the presence of physical MediaTek MT7925 wireless hardware. In typical enterprise and cloud deployments of Red Hat Enterprise Linux, Wi-Fi hardware is rarely present, significantly limiting exposure. Systems without this specific wireless controller or where the driver module is unutilized remain unaffected by the boundary check error during firmware loading.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE-193 · Off-by-one Error