Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in coolsnowwolf lede (package/lean/mt/drivers/mt7615d/src/mt_wifi/embedded/security modules). This vulnerability is associated with program files bn_lib.C. This issue affects lede: through r25.10.1.
The vulnerability is located in the bn_lib.C file in the security module of the mt7615d driver (path: package/lean/mt/drivers/mt7615d/src/mt_wifi/embedded/security). The vulnerable code contains a loop whose exit condition can never be satisfied (unreachable exit condition). Appropriately crafted input data or network event can trigger this loop, blocking thread execution indefinitely and preventing proper system operation.
An attacker can remotely exhaust CPU resources and cause permanent unavailability of the device (DoS — Denial of Service), affecting both the local system and dependent services.
Patches available from the manufacturer should be applied according to references (pull request: https://github.com/coolsnowwolf/lede/pull/13346). The update should include the mt7615d driver module containing the corrected bn_lib.C file.
The lede project (coolsnowwolf/lede) in versions up to and including r25.10.1, using the mt7615d driver.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:C/RE:L/U:Amber