CVE-2026-68307: wifi: mt76: mt7925: fix crash in reset link replay
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: fix crash in reset link replay
During reset recovery, mt7925vifconnectiter() replays firmware state for links tracked in mvif->validlinks. After MLO link changes or MCU timeout recovery, the driver bitmap can temporarily contain a link whose mac80211 bssconf has already gone away.
This can pass a NULL bssconf to mt76connacmcuuniadddev(), matching the crash where x1, the second argument, is NULL:
pc : mt76connacmcuuniadddev+0x8c/0x1f8 [mt76connaclib] lr : mt7925vifconnectiter+0x9c/0x168 [mt7925common] x2 : ffffff80a77f6018 x1 : 0000000000000000 x0 : ffffff8099402080 Call trace: mt76connacmcuuniadddev+0x8c/0x1f8 [mt76connaclib] mt7925vifconnectiter+0x9c/0x168 [mt7925common] mt7925macresetwork+0x264/0x2f8 [mt7925common]
Skip missing bssconf entries before replaying the link. Non-MLO AP/STA reset replay is unchanged because the helper still returns &vif->bssconf for the legacy link.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (mt76/mt7925)to a version that resolves this vulnerability.Patch fix crash in reset link replay
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68307?
CVE-2026-68307 has a risk score of 37, indicating a significant vulnerability in the Linux kernel.
How do I fix CVE-2026-68307?
To fix CVE-2026-68307, update to the latest version of the Linux kernel that includes the patches for this vulnerability.
What type of vulnerability is CVE-2026-68307?
CVE-2026-68307 is a crash vulnerability in the mt76 driver related to Wi-Fi functionality in Linux.
Who is affected by CVE-2026-68307?
CVE-2026-68307 affects users of the Linux kernel that utilize the mt7925 Wi-Fi driver.
When was CVE-2026-68307 published?
CVE-2026-68307 was published on August 10, 2026.