Sean Wang

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A use-after-free issue exists in the `mt76` wireless driver. The problem occurs in the `mt76 txq schedule()` function when accessing the `mtxq->wcid` pointer. This can be mitigated by protecting the `mtxq->wcid` variable with an RCU lock between the `mt76 txq schedule()` function and the `sta info alloc()` and `sta info free()` functions. Exploitation of this issue could potentially impact the confidentiality, integrity, and availability of protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.