Review reviewHigh

CVE-2024-42225

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data

CVSS: 7.5
EPSS: 0.49%
CISA KEV: Not listed
Published: 2024.07.30

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.49%

Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uninitialized data

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < dc7f14d00d0c4c21898f3504607f4a31079065a2, >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 22ea2a7f0b64d323625950414a4496520fb33657, >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < ff6b26be13032c5fbd6b6a0b24358f8eaac4f3af, >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 64f86337ccfe77fe3be5a9356b0dabde23fbb074, >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 7f819a2f4fbc510e088b49c79addcf1734503578, >= 4.16, < 5.15.163, >= 5.16 < 6.1.98, >= 6.2 < 6.6.39, >= 6.7 < 6.9.9
Fixed versions: 5.15.163, 6.1.98, 6.6.39, 6.9.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-908