CVE-2026-68311

A flaw was found in the Linux kernel's wifi: mt76: mt7925 driver. When handling Multi-Link Operation (MLO) stations, the mt7925_sta_set_decap_offload() function can attempt to dereference a null pointer if a station link is not properly associated with a Virtual Interface (VIF) link. This can lead to a system crash, resulting in a Denial of Service (DoS) for an affected system.

This vulnerability is rated as Moderate because exploitation requires the presence of specific MediaTek MT7925 wireless hardware and results solely in a denial of service through a kernel crash, without compromising system confidentiality or integrity. Typical enterprise server deployments do not utilize Wi-Fi adapters, substantially reducing exposure across standard environments. Furthermore, triggering the condition requires Multi-Link Operation station configurations on affected devices.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.