Coolsnowwolf Lede MT7603E Driver Infinite Loop Vulnerability

An infinite loop vulnerability has been identified in the CoolSnowWolf Lede distribution, specifically within the MT7603E Wi-Fi driver, in versions through r25.10.1. The issue arises in the 'bn_lib.C' file, where a cloned function from OpenSSL, 'BN_mod_sqrt()', can enter a loop that never exits, particularly when processing non-prime numbers.

Impact

Exploitation of this vulnerability leads to an infinite loop, causing the program to become unresponsive and potentially leading to a denial of service condition.

Remediation

Users can update to the latest version of CoolSnowWolf Lede, where this vulnerability has been addressed, to mitigate this issue.