A high-severity memory management vulnerability in the Linux kernel mt7996 Wi-Fi driver may allow a local attacker to cause a system crash or potentially execute arbitrary code.

This is a memory management vulnerability involving a failure to clear the Wireless Client Identifier (WCID) pointer during the mt7996_mac_sta_deinit_link routine. It requires an attacker to have adjacent network access to trigger the flaw, as indicated by the CVSS vector AV:A.

Successful exploitation could result in a kernel panic, leading to denial of service for affected wireless infrastructure. Given the CVSS score of 8.8, the potential for memory corruption introduces a risk of unauthorized system state manipulation, which could disrupt critical business operations reliant on wireless connectivity.

Immediate Action: Update the Linux kernel to version 6.18.33, 7.0.10, or 7.1 and later, where this issue has been resolved.

Proactive Monitoring: Monitor system logs for kernel oops or unexpected service restarts related to the mt76 or mt7996 wireless drivers.

Compensating Controls: If patching is not immediately feasible, restrict access to the affected wireless network segments and implement robust physical or logical access controls to limit the exposure of the wireless interface.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to the stability and security of systems utilizing the mt7996 wireless chipset. Administrators should prioritize the deployment of the provided kernel patches to eliminate the potential for memory-based exploitation.