CVE-2026-53103

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/06/2026
Last modified:
21/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync<br /> <br /> roc_abort_sync() can deadlock with roc_work(). roc_work() holds<br /> dev-&gt;mt76.mutex, while cancel_work_sync() waits for roc_work()<br /> to finish. If the caller already owns the same mutex, both<br /> sides block and no progress is possible.<br /> <br /> This deadlock can occur during station removal when<br /> mt76_sta_state() -&gt; mt76_sta_remove() -&gt;<br /> mt7925_mac_sta_remove_link() -&gt; mt7925_mac_link_sta_remove() -&gt;<br /> mt7925_roc_abort_sync() invokes cancel_work_sync() while<br /> roc_work() is still running and holding dev-&gt;mt76.mutex.<br /> <br /> This avoids the mutex deadlock and preserves exactly-once<br /> work ownership.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.11.2 (including) 6.18.33 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.10 (excluding)