CVE-2026-68194

A flaw was found in the Linux kernel's mt76 WiFi driver. When the driver processes a TXRX_NOTIFY event on non-Memory-Mapped I/O (MMIO) buses, such as USB or SDIO, it attempts to call a null function pointer. This can lead to a kernel NULL pointer dereference, causing a system crash and resulting in a Denial of Service (DoS).

This issue affects MediaTek mt7921 on non-MMIO buses (USB). MMIO-only TXRX_NOTIFY dispatched to tx_free on USB path. Systems without mt7921 USB Wi-Fi are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mt7921u module from loading. See https://access.redhat.com/solutions/41278 for instructions.