Riskcovery

CVE-2024-42225

wifi: mt76: replace skb_put with skb_put_zero

State
Published
Severity
8.3 High
Published
Jul 30, 2024
Updated
Aug 5, 2026
Reserved
Jul 30, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: replace skb_put with skb_put_zero

Avoid potentially reusing uninitialized data

Scores

CVSSScoreVectorSource
3.18.3 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7bc04215a66b60e198aecaee8418f6d79fa19faa to before dc7f14d00d0c4c21898f3504607f4a31079065a2Affected
  • 7bc04215a66b60e198aecaee8418f6d79fa19faa to before 22ea2a7f0b64d323625950414a4496520fb33657Affected
  • 7bc04215a66b60e198aecaee8418f6d79fa19faa to before ff6b26be13032c5fbd6b6a0b24358f8eaac4f3afAffected
  • 7bc04215a66b60e198aecaee8418f6d79fa19faa to before 64f86337ccfe77fe3be5a9356b0dabde23fbb074Affected
  • 7bc04215a66b60e198aecaee8418f6d79fa19faa to before 7f819a2f4fbc510e088b49c79addcf1734503578Affected
LinuxLinux
  • 4.16Affected
  • before 4.16Not affected
  • 5.15.163 through 5.15.*Not affected
  • 6.1.98 through 6.1.*Not affected
  • 6.6.39 through 6.6.*Not affected
  • 6.9.9 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.