CVE-2024-46860

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-09-27 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change When disabling wifi mt7921_ipv6_addr_change() is called as a notifier. At this point mvif->phy is already NULL so we cannot use it here.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux 7bc04215a66b60e198aecaee8418f6d79fa19faa < bcf390440080c24983ab035660203b17e7c7f31e
Linux Linux 7bc04215a66b60e198aecaee8418f6d79fa19faa < 4bfee9346d8c17d928ef6da2b8bffab88fa2a553
Linux Linux 7bc04215a66b60e198aecaee8418f6d79fa19faa < 8d92bafd4c67efb692f722d73a07412b5f88c6d6
Linux Linux 7bc04215a66b60e198aecaee8418f6d79fa19faa < 479ffee68d59c599f8aed8fa2dcc8e13e7bd13c3
Linux Linux 4.16
linux linux_kernel < 6.6.52
linux linux_kernel 6.11
linux linux_kernel 6.11
linux linux_kernel 6.11

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.21%
Raw Score 0.002060
Percentile 10.7%
Date 2026-10-30

EPSS Trend

2026-10-30
0.00206
2026-10-29
0.00206

Intelligence Sources

mitre ref →
nvd ref →