CVE-2026-53101
kernel: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · November 2, 2026
Description
A flaw was found in the Linux kernel's mt7921 Wi-Fi driver. A potential deadlock can occur when the roc_abort_sync() function attempts to cancel a work item while roc_work() is still running and holding a mutex. This situation, which can arise during Wi-Fi station removal, causes both sides to block, preventing further progress. The most important consequence is a Denial of Service (DoS), where the system becomes unresponsive.
Statement
This vulnerability is evaluated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires specific MediaTek wireless hardware to be physically or logically attached and actively processing station events. The blast radius is restricted to a local denial of service caused by a kernel deadlock, without risk to system integrity or confidentiality. Standard enterprise server deployments rarely configure or utilize Wi-Fi adapters, substantially limiting practical exposure across typical environments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock