NULL vif dereference in MediaTek MT7925 WiFi Driver

Publication date: 2026-06-24

Last updated on: 2026-07-23

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi Check for a NULL `vif` before accessing `ieee80211_vif_is_mld(vif)` to avoid a potential kernel panic in scenarios where `vif` might not be initialized.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-23

Generated

2026-08-04

AI Q&A

2026-06-24

EPSS Evaluated

2026-08-03

NVD

CVE-2026-53105

EUVD

EUVD-2026-38973

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.33 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.10 (exc)
linux	linux_kernel	From 6.11 (inc) to 6.12.91 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's wifi driver for the mt7925 chipset. It involves a potential NULL pointer dereference when the code attempts to access a virtual interface (vif) without first checking if it is initialized. Specifically, the function mt7925_mac_write_txwi did not verify if the vif pointer was NULL before calling ieee80211_vif_is_mld(vif), which could lead to a kernel panic.

Impact Analysis

The impact of this vulnerability is a potential kernel panic, which means the system could crash unexpectedly. This could lead to denial of service conditions on devices using the affected wifi driver, causing instability or downtime.

Hi! I’m here to help you understand CVE-2026-53105. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70