CVE-2026-89523
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlo_pm_work If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the firmware is not available. Add cancel_delayed_work_sync(&dev->mlo_pm_work) in all relevant teardown and suspend paths: - mt7925_mac_reset_work() (chip reset recovery) - mt7925e_unregister_device() (PCIe unbind) - mt7925_pci_suspend() (PCIe bus suspend) - mt7925_suspend() (mac80211 suspend) - mt7925u_suspend() (USB bus / runtime suspend) This ensures the work is stopped before the device state becomes invalid.
How to fix
- Linux Linux5be6d02837d418bc6c805b5cab1b338de6de9ca7, c5e073f2fbfd34d22099a50d96f60990799753e2, 2889e84282dda147f10b10d94cf0efd90a349c53, 6.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 276a568832577c81ec90b62dc506bbdc3781ca46 ≤ v < 5be6d02837d418bc6c805b5cab1b338de6de9ca7, 276a568832577c81ec90b62dc506bbdc3781ca46 ≤ v < c5e073f2fbfd34d22099a50d96f60990799753e2, 276a568832577c81ec90b62dc506bbdc3781ca46 ≤ v < 2889e84282dda147f10b10d94cf0efd90a349c53, 74eb79258bfd5f2ffe6d26a09c898992b2afa1ce, 6.14.3 ≤ v < 6.15, 6.15 | 5be6d02837d418bc6c805b5cab1b338de6de9ca7, c5e073f2fbfd34d22099a50d96f60990799753e2, 2889e84282dda147f10b10d94cf0efd90a349c53, 6.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.