SB2026091328 - Operation on a Resource after Expiration or Release in Linux kernel mt76 mt7925 driver

Description

This security bulletin contains information about 1 vulnerability.

1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2026-80936)

CWE-ID: CWE-672 - Operation on a Resource after Expiration or Release

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to trigger a kernel warning.

The vulnerability exists due to improper resource lifetime management in the mt7925 stop path when tearing down a device during multi-link power-save setup. A local user can tear down the device while delayed power-management work is pending to trigger a kernel warning.

The delayed work is scheduled with a five-second delay.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/304470333b7f525b23699ea7a7aed3b40ca37ca9
• https://git.kernel.org/stable/c/81faf578320df2dfc682a96baa6e85851dd68b6f
• https://git.kernel.org/stable/c/9e20da749ad229a1aa649ece528721b9652f15e1