CVE-2026-53100
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/06/2026
Last modified:
21/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
wifi: mt76: fix deadlock in remain-on-channel<br />
<br />
mt76_remain_on_channel() and mt76_roc_complete() call mt76_set_channel()<br />
while already holding dev->mutex. Since mt76_set_channel() also acquires<br />
dev->mutex, this results in a deadlock.<br />
<br />
Use __mt76_set_channel() instead of mt76_set_channel().<br />
Add cancel_delayed_work_sync() for mac_work before acquiring the mutex<br />
in mt76_remain_on_channel() to prevent a secondary deadlock with the<br />
mac_work workqueue.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14 (including) | 6.18.33 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.10 (excluding) |
To consult the complete list of CPE names with products and versions, see this page