In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
Address a kernel panic caused by a null pointer dereference in the `mt792x_rx_get_wcid` function. The issue arises because the `deflink` structure is not properly initialized with the `sta` context. This patch ensures that the `deflink` structure is correctly linked to the `sta` context, preventing the null pointer dereference.
BUG: kernel NULL pointer dereference, address: 0000000000000400 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 UID: 0 PID: 470 Comm: mt76-usb-rx phy Not tainted 6.12.13-gentoo-dist #1 Hardware name: /AMD HUDSON-M1, BIOS 4.6.4 11/15/2011 RIP: 0010:mt792x_rx_get_wcid+0x48/0x140 [mt792x_lib] RSP: 0018:ffffa147c055fd98 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff8e9ecb652000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8e9ecb652000 RBP: 0000000000000685 R08: ffff8e9ec6570000 R09: 0000000000000000 R10: ffff8e9ecd2ca000 R11: ffff8e9f22a217c0 R12: 0000000038010119 R13: 0000000080843801 R14: ffff8e9ec6570000 R15: ffff8e9ecb652000 FS: 0000000000000000(0000) GS:ffff8e9f22a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000400 CR3: 000000000d2ea000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2f0 ? search_module_extables+0x19/0x60 ? search_bpf_extables+0x5f/0x80 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? mt792x_rx_get_wcid+0x48/0x140 [mt792x_lib] mt7921_queue_rx_skb+0x1c6/0xaa0 [mt7921_common] mt76u_alloc_queues+0x784/0x810 [mt76_usb] ? __pfx___mt76_worker_fn+0x10/0x10 [mt76] __mt76_worker_fn+0x4f/0x80 [mt76] kthread+0xd2/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-64kb | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-azure-6.11Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fde-6.11Upgrade linux-image-azureUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-aws-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub