Skip to main content

Linux Kernel CVE-2026-53105

| EUVDEUVD-2026-38973 MEDIUM
NULL Pointer Dereference (CWE-476)
2026-06-24 Linux GHSA-99r5-v2c8-64wh
Denial Of Service Linux Null Pointer Dereference Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local low-privilege access required to reach the WiFi TX path; impact is pure kernel panic with no confidentiality or integrity effect.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 23, 2026 - 18:41 vuln.today
CVSS changed
Jul 23, 2026 - 18:38 NVD
5.5 (MEDIUM)
Patch available
Jun 24, 2026 - 18:02 EUVD
CVE Published
Jun 24, 2026 - 16:30 cve.org
UNKNOWN (no severity yet)
CVE Published
Jun 24, 2026 - 16:30 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

wifi: mt76: mt7925: prevent NULL vif dereference in mt7925_mac_write_txwi

Check for a NULL vif before accessing ieee80211_vif_is_mld(vif) to avoid a potential kernel panic in scenarios where vif might not be initialized.

AnalysisAI

NULL pointer dereference in the Linux kernel's MediaTek mt76/mt7925 WiFi driver crashes affected systems when the vif (virtual interface) pointer is uninitialized at the time mt7925_mac_write_txwi calls ieee80211_vif_is_mld(vif). Local low-privilege users on systems equipped with mt7925 hardware and running unpatched kernels can trigger a kernel panic, resulting in a denial of service. No active exploitation has been confirmed (not in CISA KEV), and the EPSS score of 0.17% (6th percentile) reflects negligible real-world exploitation probability at this time.

Technical ContextAI

The mt76 kernel module is the Linux driver family for MediaTek wireless chipsets; the mt7925 variant targets MediaTek's WiFi 6E/7 chipsets (e.g., MT7925) commonly integrated into modern laptop platforms such as Intel Meteor Lake-era systems. The function mt7925_mac_write_txwi constructs TX descriptors for outgoing WiFi frames. CWE-476 (NULL Pointer Dereference) is the root cause: the code invokes ieee80211_vif_is_mld(vif) - which dereferences vif - without first verifying that vif is non-NULL, a state that can occur when a virtual interface is torn down or has not yet been fully initialized. The fix adds an explicit NULL guard before the call. CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* confirms the scope is the upstream Linux kernel codebase.

RemediationAI

Upgrade to a patched Linux kernel version: 6.12.91, 6.18.33, 7.0.10, or 7.1 (confirmed via EUVD and kernel.org stable commits). Ubuntu users should apply the updates described in USN-8568-1 and USN-8566-1 (https://ubuntu.com/security/notices/USN-8568-1, https://ubuntu.com/security/notices/USN-8566-1). For systems where kernel updates cannot be applied immediately, a practical compensating control is to blacklist the mt76 or mt7925 kernel module (echo 'blacklist mt7925e' >> /etc/modprobe.d/blacklist.conf && update-initramfs -u) - note this disables WiFi on the affected adapter entirely and requires an alternative network path. Restricting local shell access to trusted users on mt7925-equipped shared systems also eliminates exposure until the patch can be applied.

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7 Not-Affected
SUSE Linux Enterprise High Availability Extension 16.1 Affected

Share

CVE-2026-53105 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy