CVE Database›Document archive›CVE-2026-53097

CVE-2026-53097

kernel: wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's mt7996 Wi-Fi driver. A use-after-free vulnerability exists in the mt7996_mac_dump_work() function due to a race condition during the detachment of the mt7996 PCI chip. This can occur when mt7996_crash_data is released while a related work item is still active, leading to the dereferencing of freed memory. This flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition