Security readout for executives and security teams
Plain-English summary
CVE-2024-57990 is a Linux kernel Wi-Fi driver bug affecting the mt76 mt7925 code path. A local user could potentially trigger memory corruption, with high confidentiality, integrity, and availability impact. The public record does not show active exploitation, but affected Linux systems with MediaTek MT7925 Wi-Fi should be prioritized for kernel updates.
Executive priority
Treat this as a high-priority patching item for Linux fleets with MT7925 Wi-Fi exposure. It is less urgent for servers or images without that driver path. Because exploitation is local and not publicly confirmed in the provided sources, prioritize based on hardware exposure and endpoint risk.
Technical view
The issue is an off-by-one comparison in mt7925_load_clc(), where a boundary check used > instead of >=. The Linux kernel fix states this could cause an out-of-bounds read and write. CVSS 3.1 is 7.8 with local, low-complexity, low-privilege exploitation assumptions and high CIA impact.
Likely exposure
Exposure is most likely on Linux systems running affected kernel versions with the mt76 mt7925 MediaTek Wi-Fi driver path present or enabled. Systems without that hardware, driver, or affected kernel lineage are less likely exposed. The source bundle does not provide CPEs or distribution-specific package mappings.
Exploitation context
The CVE is not listed as KEV in the provided bundle, and no cited source states active exploitation. The CVSS vector indicates local access with low privileges and no user interaction. Public evidence supports a serious memory-safety flaw, not confirmed real-world exploitation.
Researcher notes
The source evidence is concise: a Linux kernel stable fix for CWE-193 in mt7925_load_clc(). The affected-version data is limited and includes no CPEs, exploit details, or distribution status. Validation should rely on kernel build provenance, downstream advisories, and whether the referenced stable commits are included.
Mitigation direction
- Inventory Linux systems for affected kernels and MediaTek MT7925 Wi-Fi driver usage.
- Apply distribution kernel updates that include the referenced Linux stable fixes.
- Prioritize laptops, workstations, and appliances using MT7925 Wi-Fi hardware.
- If updates are unavailable, check vendor guidance for temporary mitigations.
- Disable unused MT7925 Wi-Fi capability where operationally acceptable and vendor-supported.
Validation and detection
- Confirm the running kernel version against vendor advisories and the CVE record.
- Check whether the mt76 mt7925 driver is present, loaded, or required.
- Verify installed kernel packages include one of the referenced stable fixes.
- Confirm patched systems rebooted into the updated kernel.
- Track exceptions for systems lacking vendor-provided fixed packages.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-193: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2024-57990 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1.85.9CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/d03b8fe1b518fc2ea2d82588e905f56d80cd64b2CVE reference, Linux
- https://git.kernel.org/stable/c/2d1628d32300e4f67ac0b7409cbfa7b912a8fe9dCVE reference, Linux
- https://git.kernel.org/stable/c/08fa656c91fd5fdf47ba393795b9c0d1e97539edCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Off-by-one Error
Off-by-one Error represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.