PT-2026-90066 · Linux · Linux

CVE-2026-80936

·

Published

2026-09-11

·

Updated

2026-09-11

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7925: cancel mlo pm work on stop
mt7925 queues mlo pm work with a 5 second delay during multi-link power-save setup and never cancels it on the stop path. If the device is torn down inside that window, the work outlives the teardown and its timer fires afterwards, trying to queue onto the workqueue that is already gone:
workqueue: cannot queue mt7925 mlo pm work [mt7925 common] on wq phy0 WARNING: kernel/workqueue.c:2283 at queue work+0x59/0xa0, CPU#1: swapper/1/0 call timer fn+0x2a/0x140 run timers+0x203/0x330 run timer softirq+0x86/0xf0
mt7921 already has its own stop callback, so add one for mt7925 that cancels the work before calling mt792x stop(). mt7925 ops backs both the PCIe and USB drivers, so this covers both.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80936

Affected Products

Linux