CVE-2026-68439

A flaw was found in the Linux kernel's Wi-Fi driver for the mt7925 component. This vulnerability arises from a potential NULL-pointer dereference within the mt7925_mcu_bss_he_tlv() function. If the mt76_connac_get_he_phy_cap routine returns a null value, it is not properly checked before being used, which could lead to system instability or a denial of service (DoS).

This issue affects systems using MediaTek mt7925 Wi-Fi hardware. mt7925_mcu_bss_he_tlv() did not check for a NULL HE PHY capabilities pointer before dereferencing it, which can cause a kernel oops. Systems without mt7925 wireless hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mt7925e module from loading. See https://access.redhat.com/solutions/41278 for instructions.