CVE-2026-53101: wifi: mt76: mt7921: fix potential deadlock in mt7921_roc_abort_sync
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: fix potential deadlock in mt7921rocabortsync
rocabortsync() can deadlock with rocwork(). rocwork() holds dev->mt76.mutex, while cancelworksync() waits for rocwork() to finish. If the caller already owns the same mutex, both sides block and no progress is possible.
This deadlock can occur during station removal when mt76stastate() -> mt76staremove() -> mt7921macstaremove() -> mt7921rocabortsync() invokes cancelworksync() while rocwork() is still running and holding dev->mt76.mutex.
This avoids the mutex deadlock and preserves exactly-once work ownership.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53101?
CVE-2026-53101 has a risk rating of 27.
What systems are affected by CVE-2026-53101?
CVE-2026-53101 affects the Linux kernel's mt76 mt7921 driver.
How do I fix CVE-2026-53101?
Fix CVE-2026-53101 by updating the Linux kernel to the patched version that resolves the deadlock issue.
What does CVE-2026-53101 involve?
CVE-2026-53101 involves a potential deadlock in the mt7921_roc_abort_sync function in the Linux kernel.
Is there a workaround for CVE-2026-53101?
There is no official workaround for CVE-2026-53101; updating the kernel is recommended to mitigate the vulnerability.