CVE-2026-53097
kernel: wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's mt7996 Wi-Fi driver. A use-after-free vulnerability exists in the mt7996_mac_dump_work() function due to a race condition during the detachment of the mt7996 PCI chip. This can occur when mt7996_crash_data is released while a related work item is still active, leading to the dereferencing of freed memory. This flaw could allow a local attacker to cause a denial of service or potentially execute arbitrary code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-364 · Signal Handler Race Condition