Riskcovery

CVE-2025-37796

wifi: at76c50x: fix use after free access in at76_disconnect

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

wifi: at76c50x: fix use after free access in at76_disconnect

The memory pointed to by priv is freed at the end of at76_delete_device function (using ieee80211_free_hw). But the code then accesses the udev field of the freed object to put the USB device. This may also lead to a memory leak of the usb device. Fix this by using udev from interface.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before c731cdfddcf1be1590d5ba8c9b508f98e3a2b3d6Affected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 6e4ab3e574c2a335b40fa1f70d1c54fcb58ab33fAffected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 3c619aec1f538333b56746d2f796aab1bca5c9a5Affected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 5e7df74745700f059dc117a620e566964a2e8f2cAffected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 7ca513631fa6ad3011b8b9197cdde0f351103704Affected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before a9682bfef2cf3802515a902e964d774e137be1b9Affected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 152721cbae42713ecfbca6847e0f102ee6b19546Affected
  • 29e20aa6c6aff35c81d4da2e2cd516dadb569061 to before 27c7e63b3cb1a20bb78ed4a36c561ea4579fd7daAffected
LinuxLinux
  • 3.17Affected
  • before 3.17Not affected
  • 5.4.293 through 5.4.*Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.