CVE-2024-57990 — HIGH (7.8)

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() This comparison should be >= instead of > to prevent an out of bounds read and write.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Linux	Linux Kernel	>= 6.10.13, < 6.11

Related Weaknesses (CWE)

CWE-193

References

https://git.kernel.org/stable/c/08fa656c91fd5fdf47ba393795b9c0d1e97539edMailing ListPatch
https://git.kernel.org/stable/c/2d1628d32300e4f67ac0b7409cbfa7b912a8fe9dMailing ListPatch
https://git.kernel.org/stable/c/d03b8fe1b518fc2ea2d82588e905f56d80cd64b2Mailing ListPatch

FAQ

What is CVE-2024-57990?

CVE-2024-57990 is a vulnerability with a CVSS score of 7.8 (HIGH). In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() This comparison should be >= instead of > to prevent an out of bounds read...

How severe is CVE-2024-57990?

CVE-2024-57990 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-57990?

Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.