Integer Underflow in Linux Kernel Affects Wireless MT7601U Driver

CVE-2023-53679

What is CVE-2023-53679?

A vulnerability in the Linux kernel's MT7601U wireless driver has been identified which can lead to an integer underflow. This occurs when the dma_len variable in a URB packet is manipulated, triggering an underflow in the seg_len. As a result, critical checks within the mt7601u_rx_skb_from_seg() function can be bypassed, potentially leading to a null pointer dereference. It is crucial to ensure that 'dma_len' is always greater than 'min_seg_len' to prevent this issue. This vulnerability was discovered using a modified version of syzkaller.

References