CVE-2026-68195

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mt7615 wireless driver where PKT TYPE TXRX NOTIFY events, which are intended only for mmio buses, are dispatched to mt7615 mac tx free() across all bus types. This function utilizes mt76 queue tx cleanup(), which subsequently calls the tx cleanup() callback within queue ops. Because the USB and SDIO buses for mt7663 do not implement this callback, the value is NULL, leading to a NULL pointer dereference in the RX worker when a TXRX NOTIFY event occurs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.