CVE-2024-44997 net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Memory Disclosure and Use-After-Free Vulnerabilities in Ethernet Drivers Two vulnerabilities affecting Ethernet drivers have been addressed. CVE-2024-49997, published on October 21, 2024, pertains to a memory disclosure issue in the lantiq_etop driver. CVE-2024-44997, published on September 4, 2024, involves a use-after-free panic in the mtk_wed driver. 3 sources 53