Linux Kernel WiFi MT76 MT7925 NULL Pointer Dereference Vulnerability in Thermal Initialization

A NULL pointer dereference vulnerability has been identified in the Linux kernel's WiFi MT76 MT7925 driver. The issue arises in the 'mt7925_thermal_init' function, which fails to check for errors from the 'devm_kasprintf' function. This oversight can lead to a NULL pointer dereference. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or undefined behavior in the kernel.

Reproduction

The vulnerability can be reproduced by loading the WiFi MT76 MT7925 driver version 1.0 or prior, and initializing the thermal management feature. The 'mt7925_thermal_init' function will be called, which does not properly handle errors from 'devm_kasprintf', leading to a NULL pointer dereference.

Remediation

Users can upgrade to the latest version of the Linux kernel, where this vulnerability has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.