CVE-2025-39862

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7915: fix list corruption after hardware restart

Since stations are recreated from scratch, all lists that wcids are added to must be cleared before calling ieee80211_restart_hw. Set wcid->sta = 0 for each wcid entry in order to ensure that they are not added again before they are ready.

On mt76/mt7915, a full hardware restart recreated stations but failed to clear WCID and driver lists, leading to list corruption and potential crashes after ieee80211_restart_hw(). The fix adds mt76_reset_device() to reset all WCID entries (set wcid->sta = 0, detach and clean), clear list heads and masks, and re-init per-PHY TX lists before restarting. This is primarily a local DoS in specific mt7915 setups (typically requiring CAP_NET_ADMIN or a firmware reset path).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.