In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb()
If link_conf or link_sta lookup fails in mt7996_tx_prepare_skb routine,
mt7996 driver leaks an already allocated tx token. Fix the issue
releasing the token in case of error.
Attack Parameters
Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
References 3
https://git.kernel.org/stable/c/06e65d6cf80490bc0457d339595d1ed5a89e8899
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/831074096d0450308357271fc0ffd3f600a2487e
416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/fa0e9aa92a7bc97fc42014c5efaaf1278fa92723
416baaa9-dc9f-4396-8d5f-8c081fb06d67