Linux Kernel NULL Pointer Dereference Vulnerability in mt7996_set_monitor Function

Vulnerability

A vulnerability in the Linux kernel's Wi-Fi driver for the mt76 mt7996 chipset allows for a NULL pointer dereference. This issue arises in the mt7996_set_monitor() function, where the physical (phy) pointer is dereferenced before a NULL check is performed. The vulnerability has been addressed by rearranging the code to ensure the NULL check is conducted prior to dereferencing the pointer.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, which can cause a system crash or other unintended behavior by disrupting the normal operation of the kernel.

Added: Jul 10, 2025, 8:22 AM
Updated: Jul 10, 2025, 8:22 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.