Linux Kernel Use-After-Free Vulnerability in mt7921 ACPI Handling

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's handling of ACPI (Advanced Configuration and Power Interface) for the mt7921 wireless driver. This vulnerability arises because the code dereferences a pointer to 'sar_root' after it has been freed, which can lead to undefined behavior or exploitation.

Impact

Exploitation of this vulnerability could lead to memory corruption issues, potentially allowing for arbitrary code execution or causing a system crash.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been patched. The specific commit addressing this issue is available in the Linux kernel stable tree.

Added: Dec 30, 2025, 5:14 PM
Updated: Dec 30, 2025, 5:14 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
1.8
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.