CVE-2023-3317

High

Description

A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.

SeverityHigh
CVSS7.1
Exploit probability—
ProductLinux Kernel
PublishedJun 23, 2023
First seenJun 23, 2023

How to fix

Update
  • linux linux_kernel6.2.15 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.2 ≤ v < 6.2.15, 6.36.2.15

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.