CVE-2026-68307

A flaw was found in the MediaTek mt7925 Wi-Fi driver within the Linux kernel. During a reset recovery process, the driver can attempt to access a network configuration that no longer exists. This can lead to a null pointer dereference, causing the system to crash and resulting in a Denial of Service (DoS).

This issue affects MediaTek mt7925 Wi-Fi with MLO. Reset recovery replays firmware state for stale link bitmap entries, dereferencing NULL bss_conf. Systems without mt7925 are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mt7925e module from loading. See https://access.redhat.com/solutions/41278 for instructions.