MEDIUM
CVE-2026-53105
CVSS
5.5
Description
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi
Check for a NULL `vif` before accessing `ieee80211_vif_is_mld(vif)` to
avoid a potential kernel panic in scenarios where `vif` might not be
initialized.
Summary dbcve.org
A NULL pointer dereference vulnerability exists in the mt7925 WiFi driver where the code accesses ieee80211_vif_is_mld(vif) without first checking if vif is NULL, potentially causing a kernel panic when the virtual interface is not initialized.
Mitigation
Apply the kernel patch that adds a NULL check for vif before calling ieee80211_vif_is_mld(vif) in the mt7925_mac_write_txwi function to prevent the NULL dereference.
Weakness (CWE)
CWE-476
NULL Pointer Dereference
EPSS Score
0.12%
Probability of exploitation in next 30 days
2.3th percentile
References
https://git.kernel.org/stable/c/5d5bdea4ffcf54a6c4e751df713f95a1d783f298
Patch
https://git.kernel.org/stable/c/6c52fbdc6f656ac2e8ed1e3d0f42ed21ef285e15
Patch
https://git.kernel.org/stable/c/815db7fd57aa81c93fc8a66c2fac5f8bd0a8d153
Patch
https://git.kernel.org/stable/c/962eb04e67552be406c906c83099c1d736aae3b6
Patch
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.