CVE-2024-47714: linux Out-of-bounds Write
Vulnerability summary
CVE-2024-47714 is a high (CVSS 7.6) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.6% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 24 · Related 24Timeline
- 21-10-2024PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: use hweight16 to get correct tx antenna The chainmask is u16 so using hweight8 cannot get correct tx_ant. Without this patch, the tx_ant of band 2 would be -1 and lead to the following issue: BUG: KASAN: stack-out-of-bounds in mt7996_mcu_add_sta+0x12e0/0x16e0 [mt7996e]
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.6HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu94 products
- linux< 6.8.0-54.56
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.8.0-1023.25
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < 50d87e3b70980abc090676b6b4703fcbd96221f9 | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < 8f51fc8a9e2fd96363d8ec3f4ee4b78dd64754e3 | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < 33954930870c18ec549e4bca0eeff43e252cb740 | ≥ 98686cd21624c75a043e96812beadddf4f6f48e5, < f98c3de92bb05dac4a4969df8a4595ed380b4604 | 6.2
- linux_kernel≥ 6.2, < 6.6.54 | ≥ 6.7, < 6.10.13 | ≥ 6.11, < 6.11.2
Debian1 product
- linux< 6.11.2-1
3 vendors · 97 products
