CVE-2026-53103

A flaw was found in the Linux kernel's Wi-Fi subsystem, specifically within the mt7925_roc_abort_sync function. This vulnerability can lead to a deadlock condition when roc_abort_sync() attempts to cancel a work item (roc_work()) while roc_work() is already holding a mutex. This situation can occur during Wi-Fi station removal, causing the system to become unresponsive, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate because exploitation requires local access on a host equipped with MediaTek MT7925 wireless hardware, and the resulting impact is confined to a local denial of service via a kernel deadlock without compromising data confidentiality or system integrity. Standard Red Hat Enterprise Linux server deployments do not commonly use Wi-Fi devices, which substantially reduces the practical exposure in enterprise environments. Additionally, older enterprise platforms do not include the affected driver code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.