CVE-2026-68195

A flaw was found in the Linux kernel's mt76 Wi-Fi driver, specifically affecting the mt7615 component. This vulnerability occurs because a memory-mapped I/O (MMIO) specific event, PKT_TYPE_TXRX_NOTIFY, is incorrectly processed on non-MMIO buses such as USB and SDIO. When this event is dispatched, it attempts to call a null function pointer in the receive (RX) worker, which can be triggered by a local attacker. This can lead to a system crash, resulting in a denial of service.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access and specialized MediaTek wireless hardware operating over USB or SDIO buses, restricting the impact to a denial of service. A successful attack dereferences a null pointer in the driver receive path, resulting in a system crash without compromising system confidentiality or integrity. Red Hat Enterprise Linux is not affected by this flaw because the vulnerable code is not present in supported kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.