In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses
PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7925_rx_check() and mt7925_queue_rx_skb() dispatch it to mt7925_mac_tx_free() on every bus. mt7925_mac_tx_free() cleans the DMA tx queues with mt76_queue_tx_cleanup(), which calls queue_ops->tx_cleanup(). Only the mmio queue ops implement that callback; on USB it is NULL, so a TXRX_NOTIFY there calls a NULL pointer in the RX worker:
BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: 0010:0x0 Call Trace: mt7925_mac_tx_free+0x58/0x350 [mt7925_common] mt7925_rx_check+0xe2/0x130 [mt7925_common] mt76u_rx_worker+0x1b9/0x620 [mt76_usb]
Drop the event on non-mmio buses via mt76_is_mmio(), as in commit 5683e1488aa9 ("wifi: mt76: connac: do not check WED status for non-mmio devices").
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 11, 2026 | Aug 11, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 17, 2026 | Aug 10, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-develUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules | Sep 15, 2026 | Sep 10, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub