{"id":"CVE-2024-46860","title":"wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change\n\nWhen disabling wifi mt7921_ipv6_addr_change() is called as a notifier.\nAt this point mvif->phy i…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < bcf390440080c24983ab035660203b17e7c7f31e","Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 4bfee9346d8c17d928ef6da2b8bffab88fa2a553","Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 8d92bafd4c67efb692f722d73a07412b5f88c6d6","Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 479ffee68d59c599f8aed8fa2dcc8e13e7bd13c3","Linux 4.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-29T13:54:01.586497Z"},"published":"2024-09-27","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:19:24.447Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-46860","references":[{"url":"https://git.kernel.org/stable/c/bcf390440080c24983ab035660203b17e7c7f31e"},{"url":"https://git.kernel.org/stable/c/4bfee9346d8c17d928ef6da2b8bffab88fa2a553"},{"url":"https://git.kernel.org/stable/c/8d92bafd4c67efb692f722d73a07412b5f88c6d6"},{"url":"https://git.kernel.org/stable/c/479ffee68d59c599f8aed8fa2dcc8e13e7bd13c3"}],"tags":["cve.org"],"epss":0.00206,"epssPercentile":0.1067,"ingestedAt":"2026-11-03T13:45:42.694Z","slug":"CVE-2024-46860","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change\n\nWhen disabling wifi mt7921_ipv6_addr_change() is called as a notifier.\nAt this point mvif->phy is already NULL so we cannot use it here.\n\n## Affected\n\n- `Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < bcf390440080c24983ab035660203b17e7c7f31e`\n- `Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 4bfee9346d8c17d928ef6da2b8bffab88fa2a553`\n- `Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 8d92bafd4c67efb692f722d73a07412b5f88c6d6`\n- `Linux >= 7bc04215a66b60e198aecaee8418f6d79fa19faa < 479ffee68d59c599f8aed8fa2dcc8e13e7bd13c3`\n- `Linux 4.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}