In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
Address a kernel panic caused by a null pointer dereference in the `mt792x_rx_get_wcid` function. The issue arises because the `deflink` structure is not properly initialized with the `sta` context. This patch ensures that the `deflink` structure is correctly linked to the `sta` context, preventing the null pointer dereference.
BUG: kernel NULL pointer dereference, address: 0000000000000400 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 UID: 0 PID: 470 Comm: mt76-usb-rx phy Not tainted 6.12.13-gentoo-dist #1 Hardware name: /AMD HUDSON-M1, BIOS 4.6.4 11/15/2011 RIP: 0010:mt792x_rx_get_wcid+0x48/0x140 [mt792x_lib] RSP: 0018:ffffa147c055fd98 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff8e9ecb652000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8e9ecb652000 RBP: 0000000000000685 R08: ffff8e9ec6570000 R09: 0000000000000000 R10: ffff8e9ecd2ca000 R11: ffff8e9f22a217c0 R12: 0000000038010119 R13: 0000000080843801 R14: ffff8e9ec6570000 R15: ffff8e9ecb652000 FS: 0000000000000000(0000) GS:ffff8e9f22a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000400 CR3: 000000000d2ea000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2f0 ? search_module_extables+0x19/0x60 ? search_bpf_extables+0x5f/0x80 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? mt792x_rx_get_wcid+0x48/0x140 [mt792x_lib] mt7921_queue_rx_skb+0x1c6/0xaa0 [mt7921_common] mt76u_alloc_queues+0x784/0x810 [mt76_usb] ? __pfx___mt76_worker_fn+0x10/0x10 [mt76] __mt76_worker_fn+0x4f/0x80 [mt76] kthread+0xd2/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x34/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-azure-fde-edgeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub