CVE-2026-53105
Received Received - Intake
NULL vif dereference in MediaTek MT7925 WiFi Driver

Publication date: 2026-06-24

Last updated on: 2026-06-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi Check for a NULL `vif` before accessing `ieee80211_vif_is_mld(vif)` to avoid a potential kernel panic in scenarios where `vif` might not be initialized.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-24
Last Modified
2026-06-24
Generated
2026-06-25
AI Q&A
2026-06-24
EPSS Evaluated
N/A
NVD
CVE-2026-53105
EUVD
EUVD-2026-38973
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's wifi driver for the mt7925 chipset. It involves a potential NULL pointer dereference when the code attempts to access a virtual interface (vif) without first checking if it is initialized. Specifically, the function mt7925_mac_write_txwi did not verify if the vif pointer was NULL before calling ieee80211_vif_is_mld(vif), which could lead to a kernel panic.

Impact Analysis

The impact of this vulnerability is a potential kernel panic, which means the system could crash unexpectedly. This could lead to denial of service conditions on devices using the affected wifi driver, causing instability or downtime.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53105. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart