CVE-2026-80938
Received Received - Intake

Deadlock in Linux Kernel mt7615 WiFi Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex mt7615_suspend() acquired the mt76 mutex and then called cancel_delayed_work_sync() on mac_work. mt7615_mac_work() acquires the same mutex via mt7615_mutex_acquire() at the top of the worker, so if mac_work is already running and blocked on the mutex, the suspend path deadlocks waiting for the work it holds the mutex against. Flush scan_work and mac_work before taking the mutex, matching the suspend paths in mt7921 and mt7925. scan_work only takes the mt76 spinlock, but moving it keeps the sequence consistent. This also keeps mac_work from running over an already suspended HIF, which the previous split (async cancel under the lock, sync cancel after release) would have allowed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-12
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-80938
EUVD
EUVD-2026-76261

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mt76 mt7615 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a deadlock vulnerability in the Linux kernel's mt76 Wi-Fi driver for the mt7615 chipset. The issue occurs when mt7615_suspend() holds the mt76 mutex and tries to cancel mac_work via cancel_delayed_work_sync(). If mac_work is already running and waiting for the same mutex, the system deadlocks because mt7615_mac_work() also tries to acquire the mutex.

Detection Guidance

This vulnerability is specific to the Linux kernel's mt7615 Wi-Fi driver and involves a deadlock scenario during suspend operations. Detection requires checking the kernel version and driver state. No direct commands are provided in the context to detect this issue, but monitoring for system hangs during suspend/resume cycles may indicate the problem.

Impact Analysis

This vulnerability can cause system hangs or freezes during Wi-Fi operations, particularly when suspending the device. It may lead to unresponsive systems, requiring a hard reboot to recover. Users may experience sudden system crashes or inability to properly suspend their devices.

Mitigation Strategies

Apply the kernel patch that resolves this issue. Update to a Linux kernel version that includes the fix for the mt7615 driver deadlock. Avoid suspending the system while Wi-Fi operations are active until the patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80938. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart