Linux Kernel Wireless Driver Vulnerability in mt7925 by Linux Foundation

CVE-2026-63832

What is CVE-2026-63832?

A vulnerability in the Linux kernel's mt76 wireless driver introduced potential instability when handling wireless client association through the mt7925 chipset. Specifically, the issue lies within the mt76_sta_add function where an improper publication check for the wireless client identifier (wcid) could lead to corruption of the poll list. This corruption was observed when devices disconnected from access points, potentially resulting in compromised network performance and stability. The vulnerability necessitated the addition of a conditional check to ensure the integrity of the wcid's poll_list and to prevent reinitialization when a client disconnects from an access point.

References