A use-after-free vulnerability in the Linux kernel mt7915 wireless driver could allow a local authenticated attacker to cause system instability or potential code execution.

This is a use-after-free vulnerability occurring during the cleanup of the external PHY within the mt7915 wireless driver. An attacker with local access and low privileges could trigger the error path during device initialization or registration, leading to the kernel attempting to access memory that has already been freed.

Successful exploitation of this vulnerability could result in a kernel panic, leading to denial of service for the affected system. While the CVSS score of 7.0 reflects a high severity rating due to the potential for local privilege escalation or arbitrary code execution, the high attack complexity (AC:H) limits the immediate feasibility of exploitation in standard production environments.

Immediate Action: Update the Linux kernel to version 6.1.188, 6.6.157, 6.12.110, 6.18.52, or any later stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation fault errors related to the mt76 or mt7915 driver modules, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the system to only authorized users to minimize the exposure to local attack vectors, and disable unused wireless hardware interfaces where possible.

Public Exploit Available: Unknown

Given the potential for kernel-level impact, system administrators should prioritize patching the Linux kernel as part of their standard maintenance cycle. While the complexity of the exploit provides a degree of protection, the risk of system instability remains, and applying the vendor-provided security updates is the only definitive way to resolve the underlying memory management defect.