CVE-2026-53101
Received Received - Intake
Deadlock in mt76 WiFi Driver via ROC Work

Publication date: 2026-06-24

Last updated on: 2026-06-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync roc_abort_sync() can deadlock with roc_work(). roc_work() holds dev->mt76.mutex, while cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block and no progress is possible. This deadlock can occur during station removal when mt76_sta_state() -> mt76_sta_remove() -> mt7921_mac_sta_remove() -> mt7921_roc_abort_sync() invokes cancel_work_sync() while roc_work() is still running and holding dev->mt76.mutex. This avoids the mutex deadlock and preserves exactly-once work ownership.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-24
Last Modified
2026-06-24
Generated
2026-06-25
AI Q&A
2026-06-24
EPSS Evaluated
N/A
NVD
CVE-2026-53101
EUVD
EUVD-2026-38969
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a potential deadlock in the Linux kernel's wifi driver for the mt7921 device. Specifically, the function roc_abort_sync() can deadlock with roc_work(). The deadlock happens because roc_work() holds a mutex (dev->mt76.mutex), and cancel_work_sync() waits for roc_work() to finish. If the caller already owns the same mutex, both sides block each other, causing no progress.

This deadlock can occur during the removal of a station when a sequence of function calls leads to mt7921_roc_abort_sync() invoking cancel_work_sync() while roc_work() is still running and holding the mutex. The fix prevents this deadlock and ensures that work ownership is preserved exactly once.

Impact Analysis

This vulnerability can cause a deadlock in the Linux kernel's wifi driver, which means that certain wifi operations may hang indefinitely. This can lead to system instability or unresponsiveness related to wifi functionality, particularly during station removal processes.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53101. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart