CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's mt76 driver, specifically in the handling of external PHY devices during error conditions in the mt7915 module. An improper use-after-free scenario can occur if the registration of the main PHY fails, potentially leading to memory corruption and system instability. Organizations utilizing Linux systems with the mt76 driver, particularly those relying on the mt7915 chipset for wireless connectivity, should prioritize applying the relevant patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: fix ext PHY use-after-free on register error path After mt7915_register_ext_phy() succeeded, a failure of the main PHY mt7915_init_debugfs() or mt7915_coredump_register() unwound through free_phy2, which called ieee80211_free_hw() on the ext PHY hw while it was still registered with mac80211, since mt76_unregister_device() only unregisters the main hw. Unregister the ext PHY (thermal + phy + hw) first and skip the redundant free.